PT-2021-17533 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for ABAP RFC Gateway versions 7.22 through 7.83 Description: The issue allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network, triggering an internal erro...

SUSE: Security Advisory (SUSE-SU-2016:0584-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command Execution Vulnerability in Renton's Network Security Management System

Renton Network Security Management System is one of the core products developed by Shenzhen Renton Network Technology Co., Ltd. for various industrial organizations to efficiently solve network security management problems. Rentokil Network Security Management System has a command execution...

Weak Password Vulnerability in Ampcom Deep Security Gateway

"ABT", started in 2011, is a provider of specialized core system products and security services for visual network security, with the concept of "Seeing Security, Experiencing Value" as the core. A weak password vulnerability exists in ABT Deep Security Gateway, which can be exploited by attacker...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

White hat, black hat, grey hat hackers: What’s the difference?

When you think of the world of ethical hackers white hat, malicious hackers black hat, and hackers that flirt with both sides grey hat, you may envision people in shiny trench coats and dark glasses, whose computer skills are only matched by their prowess in martial arts. The truth is that hacker...

Command Execution Vulnerability in Reporter of Shanghai New Shield Technology Co.

Ltd. is a professional security company with "network security" as its main axis and "making the network safer" as its mission to provide customers with total network security solutions. A command execution vulnerability exists in Reporter, which can be exploited by attackers to gain control of t...

Command Execution Vulnerability in the Second Generation Firewall of Shenzhen Netcom Technology Co.

Ltd. was established in 2004, is a national high-tech enterprise specializing in the research and development, production, sales and service of products in the field of network information security. The second generation firewall of Shenzhen Netvantage Technology Co., Ltd. has a command execution...

Weak Password Vulnerability in Xinda Internet Security Internet Behavior Management System

Cinda Network Security is a national high-tech enterprise focusing on the research and application of network security technology. There is a weak password vulnerability in Xinda Internet Behavior Management System, which can be exploited by attackers to obtain sensitive information...

[SECURITY] Fedora 34 Update: wireshark-3.4.5-1.fc34

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

UVI-2021-1000549 net: dsa: sja1105: add error handling in sja1105_setup()

net: dsa: sja1105: add error handling in sja1105setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.9 by commit...

SUSE SLED15 / SLES15 Security Update : polkit (SUSE-SU-2021:1843-1)

This update for polkit fixes the following issues : CVE-2021-3560: Fixed a local privilege escalation using polkitsystembusnamegetcredssync bsc1186497. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE SLES15 Security Update : avahi (SUSE-SU-2021:1845-1)

This update for avahi fixes the following issues : CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 Update avahi-daemon-check-dns.sh from Debian. Our previous version relied on...

Securing Privileged Access Within Healthcare Orgs

Healthcare organizations have always been high-value targets for cybercriminals, as their networks store large volumes of personally identifiable information PII including Social Security numbers, dates of birth, addresses and very sensitive personal health data. Since the beginning of the COVID-...

EulerOS 2.0 SP9 : nss (EulerOS-SA-2021-1931)

According to the version of the nss packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly...

EulerOS 2.0 SP9 : docker-engine (EulerOS-SA-2021-1922)

According to the version of the docker-engine packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashe...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2021-1941)

According to the version of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions...

SUSE SLES12 Security Update : dhcp (SUSE-SU-2021:1822-1)

This update for dhcp fixes the following issues : CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient bsc1186382 Note that Tenable Network Security has extracted the preceding description block directly from the SU...

EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1955)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access o...

SUSE SLES15 Security Update : ceph (SUSE-SU-2021:1835-1)

This update for ceph fixes the following issues : Update to 15.2.12-83-g528da226523 : CVE-2021-3509 fix cookie injection issue bsc1186021 CVE-2021-3531 RGWSwiftWebsiteHandler::iswebdir checks empty subdirname bsc1186020 CVE-2021-3524 sanitize \r in s3 CORSConfigurations ExposeHeader bsc1185619 No...