The vulnerability of the NTLMv1 network protocol implementation in the embedded software of Balt-System NC series numerical control systems allows a hacker to obtain information about the operator’s account credentials.

The vulnerability of the NTLMv1 network protocol implementation in the built-in software of Balt-System NC numerical control systems is related to a reversible one-way hash function. Exploiting this vulnerability can allow an attacker, operating remotely, to obtain information about the operator’...

wireshark security update

CentOS Errata and Security Advisory CESA-2020:1047 An update for wireshark is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

Moderate: Red Hat Security Advisory: wireshark security and bug fix update

An update for wireshark is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu()

A heap buffer overflow issue was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the tcpemu routine while emulating IRC and other protocols. An attacker could use this flaw to crash the QEMU process on the host, resulting in a denial of service or potential...

RHEL 6 : kernel (RHSA-2020:0790)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0790 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

D-Link DIR-867, DIR-878 and DIR-882 HNAP Authentication Bypass Vulnerability

The D-Link DIR-867, DIR-878, and DIR-882 are wireless router products from AUO D-Link of Taiwan, China.HNAP is the existence of a protocol called HNAP Home Network Administration Protocol. A security vulnerability exists in the processing of HNAP login requests in the D-Link DIR-867, DIR-878, and...

The vulnerability of the PIA Core Technology component of the PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the PIA Core Technology component in the PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

PT-2020-2555

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient access control in the Server:Group Replication GCS component of Oracle MySQL Server. It can be exploited by a remote attacker to cause a denial of service...

PT-2020-2407

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.18 and prior Description The issue is related to insufficient access control in the privileges system of Oracle MySQL Server, allowing a remote attacker to cause a denial of service via the MySQL network...

PT-2020-2551

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.19 and prior Description The issue is related to insufficient access control in the Server:Optimizer component of Oracle MySQL Server. It allows a remote attacker to cause a denial of service via the MySQL...

CVE-2020-8839

Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TFsubmask field...

The vulnerability of the Cloud Control Manager component – a software platform of the Enterprise Manager Base Platform – allows a malicious individual to gain access to modify, add, or delete data, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the Cloud Control Manager component – a software platform of the Enterprise Manager Base Platform – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized acces...

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

The vulnerability of component C of the MySQL Client database management system allows a hacker to trigger a service failure.

The vulnerability of the C API of the MySQL database management system’s client is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to trigger a service failure.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server component: The MySQL Server database management system’s Parser component, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, which is part of the database management system, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

CVE-2020-3120

A vulnerability in the Cisco Discovery Protocol implementation for Cisco FXOS Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is d...

Critical Cisco 'CDPwn' Protocol Flaws Explained: Podcast

Researchers on Wednesday disclosed five critical vulnerabilities in Cisco Discovery Protocol CDP, the Cisco Proprietary Layer 2 network protocol that is used to discover information about locally attached Cisco equipment. Researchers say that the vulnerabilities, which they collectively call CDPw...