Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

smc-australia.com.au Cross Site Scripting vulnerability OBB-1225057

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : kernel (RHSA-2020:2427)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2427 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in block/bfq-iosched.c...

smc-bd.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1184595 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

SMC Networks Arbitrary Command Execution Vulnerability

The SMC Networks D3G0804W is an SMC network device. A security vulnerability exists in the SMC Networks D3G0804W Network Diagnostic Tool, which can be exploited by a remote attacker to submit a specially crafted request to execute arbitrary commands...

CVE-2020-8087

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...

CVE-2020-8087

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...

Command injection

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...

CVE-2020-8087

SMC Networks D3G0804W D3GNV5M-3.5.1.6.10GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must use a Parameter Pollution approach against goform/formSetDiagnosticToolsFmPing by providing the...

CVE-2020-8087

Summary: CVE-2020-8087 affects SMC Networks D3G0804W family devices (D3GNV5M-3.5.1.6.10 GA) where the Network Diagnostic Tools screen can be abused to execute commands remotely. The root cause is a parameter pollution flaw in goform/formSetDiagnosticToolsFmPing: the attacker supplies vlu_diagnost...

SMC Networks SMC D3G0804W Cross-Site Scripting Vulnerability

The SMC Networks SMC D3G0804W is a wireless router from SMC Networks USA. A cross-site scripting vulnerability exists in SMC Networks SMC D3G0804W version 3.5.2.5-LATGA. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can exploit the...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

Code injection

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

SMC D3G0804W 3.5.2.5-LATGA devices allow XSS via the SSID field on the WiFi Network Configuration page after a successful login to the admin account...

CVE-2020-7249

The CVE-2020-7249 entry describes an XSS vulnerability in SMC Networks SMC D3G0804W devices (version 3.5.2.5-LAT_GA). The issue enables stored or reflected XSS via the SSID field on the WiFi Network Configuration page after an admin login. Root cause is improper validation/handling of SSID data i...

CVE-2019-6147

Forcepoint NGFW Security Management Center SMC versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next...

Design/Logic Flaw

Forcepoint NGFW Security Management Center SMC versions lower than 6.5.12 or 6.7.1 have a rare issue that in specific circumstances can corrupt the internal configuration database. When the database is corrupted, the SMC might produce an incorrect IPsec configuration for the Forcepoint Next...

CVE-2019-6147

The CVE-2019-6147 entry affects Forcepoint NGFW Security Management Center (SMC) versions older than 6.5.12 and 6.7.1. The issue is a rare data-corruption of the internal configuration database, which can lead the SMC to generate an incorrect IPsec configuration for Forcepoint NGFW. Consequences ...