CVE-2020-11552

The CVE-2020-11552 vulnerability affects ManageEngine ADSelfService Plus prior to build 6003. It is an elevation-of-privilege flaw where the product does not properly enforce privileges related to a Certificate dialog, potentially allowing an unauthenticated attacker to escalate to SYSTEM on a Wi...

Logic Flaw Vulnerability in Changjitong T+ Standard Edition

Ltd. is a company dedicated to providing platform services, application services, and value-added data services centered on financial and management services for small and medium-sized enterprises in China. A logic flaw vulnerability exists in Changjitong T+ Standard Edition. An attacker can...

IBM Spectrum Protect Plus Denial of Service Vulnerability (CNVD-2020-44566)

IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. A security vulnerability exists in IBM...

IBM Spectrum Protect Plus hostname Command Injection

The IBM Spectrum Protect Plus SPP administrative console running on the remote host is affected by a remote command injection vulnerability due to improper validation of user-supplied data when processing a 'set hostname' HTTP request. An unauthenticated, remote attacker can exploit this, via a...

Security Bulletin: Information Disclosure in IBM Spectrum Protect Plus (CVE-2020-4565)

Summary IBM Spectrum Protect Plus uses insecure communication between the application and server which could allow an attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2020-4565 DESCRIPTION: IBM Spectrum Protect Plus could allow an attacker to obtain sensitive information...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

Design/Logic Flaw

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

CVE-2020-4631

Summary of CVE-2020-4631 (IBM Spectrum Protect Plus) : Affects IBM Spectrum Protect Plus versions 10.1.0–10.1.6. In Windows, agent files in non-default configurations have permissions allowing access to everyone with full control, enabling a local user to potentially interrupt service operations....

CVE-2020-4631

IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with full control permissions, which could allow a local user to cause interruption of the service operations. IBM X-Force ID: 185372...

Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Protect Plus (CVE-2020-10531, CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)

Summary Node.js is vulnerable to buffer overflows, bypass of security restrictions, and denial of service which may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-10531 DESCRIPTION: International Components for Unicode ICU for C/C++ is vulnerable to a heap-based buffer...

Security Bulletin: OpenSSH vulnerability affects IBM Spectrum Protect Plus (CVE-2020-15778)

Summary A vulnerability in OpenSSH may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-15778 DESCRIPTION: OpenSSH could allow a remote attacker to execute arbitrary commands on the system, caused by improper input validation in the remote function in scp.c. By using backti...

ICU: Integer overflow in UnicodeString::doAppend()

An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...

openSUSE Security Update : prboom-plus (openSUSE-2020-807)

This update for prboom-plus fixes the following issues : - CVE-2019-20797: Fixed a buffer overflow in client and server code responsible for handling received UDP packets boo1171974 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...

Security Bulletin: Vulnerabilities in Faster-XML jackson-databind affect IBM Spectrum Protect Plus (CVE-2020-10673, CVE-2020-1112, CVE-2020-11113, CVE-2020-10672, CVE-2020-10968, CVE-2020-10969, CVE-2020-11619, CVE-2020-11111, CVE-2020-11620)

Summary There are multiple vulnerabilities in FasterXML jackson-databind that may affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-10673 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe...

Unspecified Vulnerability in Oracle Hyperion BI+ (CNVD-2020-43723)

Oracle Hyperion BI+ is a business intelligence platform. A security vulnerability exists in Hyperion BI+. An attacker could exploit the vulnerability to gain unauthorized access to data and compromise the confidentiality of the data...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...

Apple Security Update: iOS 12.4.8

Apple recommends to install security update iOS 12.4.8 on devices iPhone 5s, iPhone 6 and 6 Plus, iPad Air, iPad mini 2 and 3, iPod touch 6th generation...

OPENSUSE-SU-2020:0958-1 Security update for hylafax+

This update for hylafax+ fixes the following issues: Security issue fixed: - CVE-2020-8024 boo1172731 hylafax+ was updated to version 7.0.2: change FIXEDWIDTH default to better accommodate auto-rotation 13 Dec 2019 prevent SSLaccept from blocking 5 Dec 2019 support libtiff v4.1 5 Dec 2019 fix...