Juniper Secure Access SSL VPN Privilege Escalation

In 2006...

CVE-2018-20193

Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...

CVE-2018-20193

CVE-2018-20193 affects Secure Access SSL VPN SA Series (notably SA-4000 5.1R5 build 9627 / 4.2 Release build 7631). Description: a privilege-escalation flaw where a readonly user can change the administrator password by cloning and modifying the /dana-admin/user/update.cgi page and saving changes...

PT-2018-15290

Name of the Vulnerable Software and Affected Versions Secure Access SA Series SSL VPN versions 4.2 through 5.1R5 Description The issue allows for privilege escalation. This is demonstrated by the ability of a readonly user to change the administrator user password. The exploitation occurs because...

CVE-2018-20193: Improper Privilege Management

Certain Secure Access SA Series SSL VPN products originally developed by Juniper Networks but now sold and supported by Pulse Secure, LLC allow privilege escalation, as demonstrated by Secure Access SSL VPN SA-4000 5.1R5 build 9627 4.2 Release build 7631. This occurs because appropriate controls...

macOS 10.13.6 Multiple Vulnerabilities (Security Update 2018-003)

The remote host is running macOS 10.13.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities affecting the following components : - AMD - Disk Images - IOHIDFamily - Kernel - WindowServer C Tenable Network Security, Inc. include"compat.inc"; if description...

Information Disclosure in Install Tool

More info at https://typo3.org/security/advisory/typo3-core-sa-2018-010...

Password Policy - Less critical - Denial of Service - SA-CONTRIB-2018-077

The Password Policy module makes it possible to set constraints on user passwords which disallow certain passwords. The "digit placement" constraint is vulnerable to Denial of Service attacks if an attacker submits specially crafted passwords which can cause a site to become unresponsive. This...

Responsive Menus - Moderately critical - Cross site scripting - SA-CONTRIB-2018-079

This module enables you to collapse your sites main menu on mobile, and show a menu toggle button. The module doesn't sufficiently sanitize configuration settings provided by users which leads to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacke...

Bootstrap - Moderately critical - Cross site scripting - SA-CONTRIB-2018-074

This base theme bridges the gap between Drupal and the Bootstrap Framework. The theme doesn't sufficiently filter valid targets under the scenario of opening modals, popovers, and tooltips. This vulnerability is mitigated by the fact that an attacker must already have the ability to either:...

CVE-2018-12241

CVE-2018-12241 affects Symantec Security Analytics Web UI (SA) 7.x prior to 7.3.4; vulnerability is a reflected cross-site scripting (XSS) in the Web UI, allowing a remote attacker who knows the SA host to craft a malicious URL and entice SA users to reveal or run malicious JavaScript in the brow...

DEBIAN-CVE-2018-19517

An issue was discovered in sysstat 12.1.1. The remapstruct function in sacommon.c has an out-of-bounds read during a memset call, as demonstrated by sadf...

PT-2018-3559

Name of the Vulnerable Software and Affected Versions: sysstat version 12.1.1 Description: An issue in the remap struct function, located in sa common.c, is related to an out-of-bounds read during a memset call. This can be exploited by a remote attacker to cause a denial of service...

PT-2018-1929

Name of the Vulnerable Software and Affected Versions sysstat versions 12.1.1 and earlier Description The issue is caused by an out-of-bounds read in the remap struct function in sa common.c due to a memmove call. This can potentially allow an attacker to execute arbitrary code or cause a denial ...

Cisco ASA Denial of Service Vulnerability (cisco-sa-20181031-asaftd-sip-dos)

According to its self-reported version the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a denial of service vulnerability which could allow an unauthenticated, remote attacker to cause a reload of the affected system. TRUSTED...

Nextcloud Server < 14.0.0, < 13.0.3, < 12.0.8 Session fixation on public share page (NC-SA-2018-013) - Windows

Nextcloud Server is prone to a session fixation vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Nextcloud Server < 14.0.0 Multiple Vulnerabilities (NC-SA-2018-011, NC-SA-2018-012, NC-SA-2018-014) - Windows

Nextcloud Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Session Limit - Critical - Insecure Session Management - SA-CONTRIB-2018-072

The session limit module enables a site administrator to set a policy around the number of active sessions users of the site may have. This is typically set to one so that you can only be logged in once with the same user account. In one configuration of the module, when a user logs in with anoth...

EulerOS Virtualization 2.5.0 : gnupg2 (EulerOS-SA-2018-1333)

According to the version of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A data validation flaw was found in the way gnupg processes file names during decryption and signature validation. An attacker may be...

Intel Quartus Family - Privilege Escalation Vulnerability

Document Title: =============== Intel Quartus Family - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2160 Video: https://www.vulnerability-lab.com/getcontent.php?id=2159 Intel ID: INTEL-SA-00151 Ref:...