CVE-2020-7136

CVE-2020-7136 affects HPE Smart Update Manager (SUM) prior to version 8.5.6. The vulnerability could allow remote unauthorized access to SUM. Hewlett Packard Enterprise provides a software update to resolve this vulnerability in SUM prior to 8.5.6; the remediation is to download and install the l...

CVE-2020-7136

A security vulnerability in HPE Smart Update Manager SUM prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager SUM prior to 8.5.6. Please visit the HPE Support Center at...

Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

PT-2020-20164 · Abb · Compact Hmi +17

Name of the Vulnerable Software and Affected Versions: ABB Ability System 800xA versions 5.1 through 6.1 Compact HMI versions 5.1 through 6.0 Control Builder Safe versions 1.0 through 2.0 Symphony Plus -S+ Operations versions 3.0 through 3.2 Symphony Plus -S+ Engineering versions 1.1 through 2.2...

Security Advisory - Invalid Pointer Access Vulnerability in Huawei OceanStor Product

There is an invalid pointer access vulnerability in Huawei OceanStor 5310 product. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot. Vulnerability ID: HWPSIRT-2020-02002...

ALBA-2020:1871 openssl-pkcs11 bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALBA-2020:1633 xorg X11 server and driver bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALEA-2020:1611 input stack bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALEA-2020:1607 http-parser bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

ALSA-2020:1605 Moderate: python27:2.7 security, bug fix, and enhancement update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

JVN#47668991: Sales Force Assistant vulnerable to cross-site scripting

Sales Force Assistant provided by NI Consulting CO.,Ltd. contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser while logging in Sales Force Assistant. Solution Update the Software Update the software to the latest version...

CVE-2020-9488

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1...

JVN#35649781: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Authentication bypass in the API used to specify the fields CWE-287 - CVE-2020-5563 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2|...

DSA-4662-1 openjdk-11 - security update

Bulletin has no description...

SUSE-SU-2020:1092-1 Security update for resource-agents

This update for resource-agents fixes the following issues: - Fixed multiple vulnerabilities related to unsafe tempfile usage. bsc1146690 bsc1146691 bsc1146776 bsc1146784 bsc1146785 bsc1146787 bsc1146789 - Fixed issues where the ocfmon user was created with a default password bsc1021689, bsc11466...

Security Advisory - Local Privilege Escalation Vulnerability in Huawei OSD Product

There is a local privilege escalation vulnerability in Huawei OSD product. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Vulnerability ID: HWPSIRT-2020-02153 This...

OpenSSL security releases do not require Node.js security releases

OpenSSL security releases do not require Node.js security releases Update The OpenSSL project has released a description of the issue fixed in the OpenSSL 1.1.1g update. It only affects a function which is not called by Node.js or its dependencies, and as such, does not affect Node.js. No Node.js...

PT-2020-20356 · Google · Google Earth Pro

Name of the Vulnerable Software and Affected Versions: Google Earth Pro versions prior to 7.3.3 Description: The issue allows an attacker to execute unauthenticated remote code on the targeted system by inserting malicious local files, utilizing a technique known as DLL hijacking. This is made...

PT-2020-12922 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.17 Description: An issue was discovered that allows unauthorized deletion of usergroups due to incorrect ACL checks in the access level section of com users. Recommendations: For versions prior to 3.9.17, update ...

CVE-2020-5270

In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is an open redirection when using back parameter. The impacts can be many, and vary from the theft of information and credentials to the redirection to malicious websites containing attacker-controlled content, which in some cases even cau...