Information disclosure

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

CVE-2020-6250

SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigured endpoints exposed over the adjacent network, to read system administrator password leading to Information Disclosure. This could help the attacker to read/write any data and even stop t...

Over 4000 Android Apps Expose Users' Data via Misconfigured Firebase Databases

More than 4,000 Android apps that use Google's cloud-hosted Firebase databases are 'unknowingly' leaking sensitive information on their users, including their email addresses, usernames, passwords, phone numbers, full names, chat messages and location data. The investigation, led by Bob Diachenko...

The vulnerability of spam filtering systems using Perl-based text analysis tools like SpamAssassin arises from the failure to address the special elements used in operating system commands. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of spam filtering systems that use Perl-based text analysis software like SpamAssassin is related to incorrect configuration of system commands. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause servic...

Input Validation Error Vulnerability in Multiple NETGEAR Products (CNVD-2021-46351)

NETGEAR D7800 and others are products of NETGEAR Corporation.NETGEAR D7800 is a wireless modem.NETGEAR D6100 is a wireless modem.NETGEAR WNDR4300 is a wireless router.NETGEAR WNDR4300 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a...

kernel: integer overflow in tcp_ack_update_rtt in net/ipv4/tcp_input.c

A flaw was reported in the Linux kernel's TCP subsystem while calculating a packet round trip time, when a sysctl parameter /proc/sys/net/ipv4/tcpminrttwlen is set incorrectly. This causes an integer overflow which can lead to a denial Of service DOS attack...

Unspecified Vulnerability in NETGEAR R7800

The NETGEAR R7800 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR R7800 prior to version 1.0.2.46, which stems from a misconfiguration of security settings. No details of the vulnerability are available at this time...

CVE-2018-21159

NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings...

Unspecified Vulnerability in Multiple NETGEAR Products (CNVD-2020-28014)

NETGEAR D7800 and others are products of NETGEAR USA.NETGEAR D7800 is a wireless modem.NETGEAR R7500 is a wireless router.NETGEAR WNDR3700 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a misconfiguration of security settings. No detailed...

Multiple NETGEAR Products Input Validation Error Vulnerability (CNVD-2021-67651)

NETGEAR JNR1010 and others are a wireless router from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products, which stems from misconfigured security settings. No detailed vulnerability details are available at this time...

Input Validation Error Vulnerability in Multiple NETGEAR Products (CNVD-2021-61046)

NETGEAR D7000 and others are products of NETGEAR USA.NETGEAR D7000 is a wireless modem.NETGEAR R6700v2 is a wireless router.NETGEAR R6800 is a wireless router. A security vulnerability exists in multiple NETGEAR products that stems from a misconfiguration of security settings. No detailed...

tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling

A flaw was found in Apache Tomcat. The HTTP header parsing code used an approach to end-of-line EOL parsing that allowed some invalid HTTP headers to be parsed as valid. This led to the possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the...

Unspecified Vulnerability in NETGEAR WAC505 and WAC510

Both the NETGEAR WAC505 and NETGEAR WAC510 are a wireless access point AP from NETGEAR. A security vulnerability exists in the NETGEAR WAC505 prior to version 8.0.6.4 and the WAC510 prior to version 8.0.6.4, which stems from a misconfiguration of security settings. Detailed vulnerability details...

CVE-2019-19000

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP headers have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information...

The Future is Misconfigured

As the world continues to grow more agile and flexible, it is crucial to know the state of the threat landscape. Trend Micro experts’ breakdown insights on current and emerging threats and technologies, with cloud misconfigurations front and center...

CVE-2020-3923

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

CVE-2020-3923

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

CVE-2020-3923 TONNET DVR – Broken Access Control

DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET, contain misconfigured authentication mechanism. Attackers can crack the default password and gain access to the system...

PT-2020-3259

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 7.0.0 through 7.0.99 Apache Tomcat versions 8.5.0 through 8.5.50 Apache Tomcat versions 9.0.0.M1 through 9.0.30 Description The issue is related to the HTTP header parsing code, which used an approach to end-of-line...

Docker Registries Expose Hundreds of Orgs to Malware, Data Theft

A slew of misconfigured Docker container registries has inadvertently exposed source code for 15,887 unique versions of applications owned by research institutes, retailers, news media organizations and technology companies. According to Palo Alto Networks’ Unit 42 division, the registries lacked...