Xxe

Improper restriction of XML external entity reference 'XXE' vulnerability in Palo Alto Networks Panorama management service allows remote unauthenticated attackers with network access to the Panorama management interface to read arbitrary files on the system. This issue affects: All versions of...

Multiple vulnerabilities fixed in Squid

The developers of Squid have fixed several vulnerabilities in Squid proxy. An unauthenticated malicious person can exploit the remote vulnerabilities to exploit them to cause a denial-of-service cause, access sensitive data or execute arbitrary code with application privileges. For the...

CVE-2020-3311

A vulnerability in the web interface of Cisco Firepower Management Center FMC Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of HTTP request parameters. An attacker could exploit this...

Oracle: Unpatched Versions of WebLogic App Server Under Active Attack

Oracle is urging customers to fast-track a patch for a critical flaw in its WebLogic Server under active attack. The company said it has received numerous reports that attackers were targeting the vulnerability patched last month. Oracle WebLogic Server is a popular application server used in...

CVE-2020-11842

Information disclosure vulnerability in Micro Focus Verastream Host Integrator VHI product, affecting versions earlier than 7.8 Update 1 7.8.49 or 7.8.0.49. The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view...

Information disclosure

Information disclosure vulnerability in Micro Focus Verastream Host Integrator VHI product, affecting versions earlier than 7.8 Update 1 7.8.49 or 7.8.0.49. The vulnerability allows an unauthenticated attackers to view information they may not have been authorized to view...

CVE-2018-21117

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...

CVE-2018-21115

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2018-21116

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

Remote code execution

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...

Remote code execution

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

Remote code execution

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2018-21117

The CVE-2018-21117 issue affects NETGEAR XR500 routers (firmware versions before 2.3.2.32). The vulnerability allows remote code execution via the traceroute handler by unauthenticated attackers, with impact on confidentiality, integrity, and availability. Affected entries consistently state pre-...

CVE-2018-21117

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler...

CVE-2018-21116

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2018-21115

NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers...

CVE-2020-11790

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers...

CVE-2020-11790

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers...

Remote code execution

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers...

CVE-2020-11790

NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers...