5265 matches found
CVE-2020-10255
The CVE-2020-10255/TRRRespass issue affects modern memory (DDR4/LPDDR4 after 2015) where Target Row Refresh mitigations can be bypassed by rowhammer patterns. Documents in connected sources confirm this can allow privilege escalation, kernel/Sudo compromise, and cross-tenant VM access via bit fli...
PT-2020-12008
Name of the Vulnerable Software and Affected Versions Modern DRAM chips DDR4 and LPDDR4 after 2015 are affected, specifically chips produced by SK Hynix, Micron, and Samsung. Description The issue is related to a vulnerability in the deployment of internal mitigations against RowHammer attacks,...
CVE-2020-10100
An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with specific customers. However, the application does not properly implement access controls related to this functionality. As such, users of one company are able to access ticket da...
CVE-2020-10100
An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with specific customers. However, the application does not properly implement access controls related to this functionality. As such, users of one company are able to access ticket da...
Design/Logic Flaw
An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with specific customers. However, the application does not properly implement access controls related to this functionality. As such, users of one company are able to access ticket da...
CVE-2020-10100
CVE-2020-10100 (Zammad) affects Zammad 3.0–3.2 and arises from improper access controls in the ticket/customer data view, enabling users from one company to access ticket data from other companies in a multi-tenant deployment. The impact is limited to confidentiality (high impact per CVE sources)...
CVE-2020-10100
An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with specific customers. However, the application does not properly implement access controls related to this functionality. As such, users of one company are able to access ticket da...
CVE-2020-10100
An issue was discovered in Zammad 3.0 through 3.2. It allows for users to view ticket customer details associated with specific customers. However, the application does not properly implement access controls related to this functionality. As such, users of one company are able to access ticket da...
PT-2020-11924
Name of the Vulnerable Software and Affected Versions Zammad versions 3.0 through 3.2 Description An issue in the application allows users to view ticket customer details associated with specific customers due to improper implementation of access controls. This enables users of one company to...
CVE
CVE CVE-2017-16900: Hunesion i-oneNet Incorrect Access Con...
Open Network Operating System (ONOS) Code Unexpected Execution Vulnerability (CNVD-2020-14221)
Open Network Operating System ONOS is a carrier-grade SDN network operating system for service providers and enterprise backbones. A code unintended execution vulnerability exists in Open Network Operating System ONOS 1.14. The vulnerability stems from a host event listener not handling the...
CVE-2019-16301
An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...
CVE-2019-16301
An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...
Code injection
An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...
CVE-2019-16301
An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...
PT-2020-9814
Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the virtual tenant network application org.onosproject.vtn where the host event listener does not handle the HOST MOVED event type. This could lead to the...
CVE-2019-16301: Improper Handling of Exceptional Conditions
An issue was discovered in Open Network Operating System ONOS 1.14. In the virtual tenant network application org.onosproject.vtn, the host event listener does not handle the following event types: HOSTMOVED. In combination with other applications, this could lead to the absence of intended code...
How We Streamlined Infrastructure and Tooling as a Service for Development
At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...
EulerOS 2.0 SP2 : openldap (EulerOS-SA-2019-2358)
According to the versions of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security...