9861 matches found
Authentication Bug Opens Android Smart-TV Box to Data Theft
A critical bug in the Hindotech HK1 TV Box would allow root-privilege escalation thanks to improper access control. A successful exploit would allow attackers to steal social-networking account tokens, Wi-Fi passwords, cookies, saved passwords, user-location data, message history, emails, contact...
chromium-browser: Inappropriate implementation in networking
Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
PT-2020-4246 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A denial of service issue exists due to the improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This could allow an attacker to cause a target system to st...
virginiabusinessnetworking.activeboard.com Cross Site Scripting vulnerability OBB-1399631
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
grassroots-networking.activeboard.com Cross Site Scripting vulnerability OBB-1399625
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Security Guardium. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE...
The vulnerability of the Flexible NetFlow operating system in Cisco IOS XE network devices of the Cisco Catalyst 9800 Series allows a attacker to cause service interruptions.
The vulnerability of the Flexible NetFlow operating system and Cisco IOS XE network devices from the Cisco Catalyst 9800 series is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2020-13645 affecting package glib-networking 2.59.1-7
CVE-2020-13645 affecting package glib-networking 2.59.1-7. A patched version of the package is available...
Fedora 33 : chromium (2020-2d994b986d)
Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs : CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 It also has a fix for an issue where networking... uh... didn't. ---- Update Chromium to 85.0.4183.102. Fix...
CVE-2020-15992
Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page...
Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...
Product release: Virtuozzo Hybrid Infrastructure 4.0 (4.0.0-734)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover networking, storage core, appliance, object storage, monitoring, performance charts, and localization...
Fedora 32 : chromium (2020-214865ce21)
Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs : CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 It also has a fix for an issue where networking... uh... didn't. Note that Tenable Network Security has...
Fedora 31 : chromium (2020-aea86f913e)
Update to 85.0.4183.121. Why? Because security, that's why. It fixes these CVEs : CVE-2020-15960 CVE-2020-15961 CVE-2020-15962 CVE-2020-15963 CVE-2020-15964 CVE-2020-15965 CVE-2020-15966 It also has a fix for an issue where networking... uh... didn't. ---- Update Chromium to 85.0.4183.102. Fix...
Oracle Linux 8 : virt:ol (ELSA-2020-4059)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4059 advisory. - kvm-usb-fix-setuplen-init-CVE-2020-14364.patch bz1869708 - Resolves: bz1869708 CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue whi...
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Server-Side Request Forgery
BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF Vendor: BrightSign, LLC Product web page: https://www.brightsign.biz Affected version: Model: XT, XD, HD, LS Firmware / OS version: =8.2.26 Summary: BrightSign designs media players and provides free software and cloud...
QEMU: slirp: use-after-free in ip_reass() function in ip_input.c
A use-after-free flaw was found in the SLiRP networking implementation of the QEMU emulator. Specifically, this flaw occurs in the ipreass routine while reassembling incoming IP fragments whose combined size is bigger than 65k. This flaw allows an attacker to crash the QEMU process on the host,...
RHEL 8 : virt:rhel (RHSA-2020:4059)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4059 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contai...
Important: Red Hat Security Advisory: virt:rhel security update
An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
QEMU: slirp: networking out-of-bounds read information disclosure vulnerability
An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6sendechoreply routine while replying to an ICMP echo request, also known as ping. This flaw allows a malicious guest to leak the contents of the host memory,...