5773 matches found
CVE-2020-35584
The vulnerability affects Solstice Pod prior to version 3.0.3. The web services expose a Browser Look‑in feature that allows connections over unencrypted channels. An attacker positioned to observe legitimate user network traffic could monitor interactions with the web services and capture sensit...
CVE-2020-35584
In Solstice Pod before 3.0.3, the web services allow users to connect to them over unencrypted channels via the Browser Look-in feature. An attacker suitably positioned to view a legitimate user's network traffic could record and monitor their interactions with the web services and obtain any...
CVE-2020-35658
SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted...
CVE-2020-35658
SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted...
CVE-2020-35658
SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted...
Mersive Solstice Pod Authorization Issues Vulnerability
Mersive Solstice Pod is a software application for conference screen sharing from Mersive USA. A security vulnerability exists in Solstice Pod before 3.0.3 that originates when web services allow users to connect to them over an unencrypted channel via the browser view feature. An attacker who is...
Copperfasten Technologies TitanHQ SpamTitan Encryption Issue Vulnerability
Copperfasten Technologies TitanHQ SpamTitan is a spam filter from Copperfasten Technologies, Ireland. The product blocks email threats such as spam, viruses, malware, ransomware and phishing. A security vulnerability exists in SpamTitan versions prior to 7.09, which stems from a vulnerability tha...
RHEL 7 : java-1.7.1-ibm (RHSA-2020:5586)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5586 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IB...
OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JNDI. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...
The Risky Business: Rapid7 Report Highlights Need for Improved Vulnerability Management Practices
Back in July, Rapid7 released its first-ever National / Industry / Cloud Exposure Report, otherwise known as “NICER.” This report had a big job: to assess not only the prevalence of known threats, but also to provide a geographic census of those threats. It tells the all-too-true story of...
CVE-2020-26816
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
CVE-2020-26816
SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...
SUSE SLED15 / SLES15 Security Update : mutt (SUSE-SU-2020:3568-1)
This update for mutt fixes the following issues : CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 Note that Tenable Network Securi...
The vulnerability of the “energo” database of the KTS “Mayak”, which allows a intruder to gain unauthorized access to protected information
The vulnerability of the “energo” database of the “Mayak” system is related to the storage of passwords in an unencrypted form. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
Updated mutt packages fix a security vulnerability
Mutt before 2.0.2 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted...
OPENSUSE-SU-2020:2141-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported from...
OPENSUSE-SU-2020:2128-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113 This update was imported from...
Security update for mutt (important)
openSUSE Security Update: Security update for mutt Announcement ID: openSUSE-SU-2020:2128-1 Rating: important References: 1179035 1179113 Cross-References: CVE-2020-28896 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description...
SUSE-SU-2020:3568-1 Security update for mutt
This update for mutt fixes the following issues: - CVE-2020-28896: incomplete connection termination could lead to sending credentials over unencrypted connections bsc1179035 - Avoid that message with a million tiny parts can freeze MUA for several minutes bsc1179113...