Code injection

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page...

CVE-2020-15498

CVE-2020-15498 affects ASUS RT-AC1900P routers prior to 3.0.0.4.385_20253. The vulnerability stems from the firmware update mechanism accepting unvalidated server certificates due to the use of wget with the --no-check-certificate option. This enables potential man-in-the-middle scenarios during ...

CVE-2020-15498

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...

CVE-2020-15499

The CVE-2020-15499 issue affects ASUS RT-AC1900P routers. A cross-site scripting vulnerability exists in the Firmware Upgrade page’s release notes rendering, enabling injected script when a malicious actor can influence the page (e.g., via a MITM scenario with spoofed release notes). Affected fir...

CVE-2020-15498: Improper Certificate Validation

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. The router accepts an arbitrary server certificate for a firmware update. The culprit is the --no-check-certificate option passed to wget tool used to download firmware update files...

CVE-2020-15499: Improper Neutralization of Input During Web Page Generation

An issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.38520253. They allow XSS via spoofed Release Notes on the Firmware Upgrade page...

Moderate: Red Hat Bug Fix Advisory: kernel-rt bug fix update

Updated kernel-rt packages that fix one bug are now available for Red Hat Enterprise Linux 7. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. This update fixes the following bug: kernel-rt: update to th...

RHEL 6 : kernel-rt (RHSA-2020:3389)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3389 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Security update for Windows 8.1, RT 8.1, and Server 2012 R2: August 19, 2020

Security update for Windows 8.1, RT 8.1, and Server 2012 R2: August 19, 2020 Summary This update resolves vulnerabilites in the Windows operating systems that are listed in the "Applies to" section. To learn more about these vulnerabilites, see the following articles: CVE-2020-1530 | Windows Remo...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 6 : kernel-rt (RHSA-2020:3266)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3266 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

RHEL 7 : kernel-rt (RHSA-2020:3221)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3221 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 : kernel-rt (RHSA-2020:3219)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3219 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

KLA11928 Microsoft Advisory for GRUB

Security vulnerability was found in the GRand Unified Boot Loader GRUB. The vulnerability could allow for Secure Boot bypass. For more information check the link below. Original advisories ADV200011 Related products Microsoft-Windows-Server Microsoft-Windows-Server-2012 Microsoft-Windows-8...

Important Photon OS Security Update - PHSA-2020-0119

Updates of 'openjdk11', 'linux-rt', 'linux-esx', 'openjdk8', 'linux', 'nodejs', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0119

Updates of 'linux-aws', 'openjdk8', 'linux', 'openjdk11', 'nodejs', 'linux-secure', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0118

Updates of 'python2', 'python3', 'linux-rt', 'mysql' packages of Photon OS have been released...

RHEL 8 : kernel-rt (RHSA-2020:3016)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3016 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 14, 2020

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 14, 2020 Applies to Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2012 R2 Windows Server 2012 R2 Server Core installation Summary This update makes quality improvements to the...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...