MGASA-2020-0376 Updated cifs-utils packages fix security vulnerability

The mount.cifs utility has a shell injection issue where one can embed shell commands via the username mount option. Those commands will be run via popen in the context of the user calling mount CVE-2020-14342...

CVE-2020-24625

Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24625

Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

Directory traversal

Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24624

Unathenticated directory traversal in the DownloadServlet class execute method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24626

Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24625

Summary: CVE-2020-24625 is an unauthenticated directory traversal vulnerability in the ReceiverServlet doGet() of Hewlett Packard Enterprise Pay per Use (PPU) Utility Computing Service (UCS) Meter, up to version 1.9 (vulnerability exists prior to 1.9). The root cause is lack of proper validation ...

CVE-2020-24625: Improper Limitation of a Pathname to a Restricted Directory

Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24624: Improper Limitation of a Pathname to a Restricted Directory

Unathenticated directory traversal in the DownloadServlet class execute method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24626: Improper Limitation of a Pathname to a Restricted Directory

Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

Oracle Solaris Device Driver Utility Data Modification DoS

The vulnerability of the Device Driver Utility component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service failures...

HPESBGN04037 rev.1 - HPE Utility Computing Service (UCS) Meter, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Directory Traversal, Unauthenticated Arbitrary Code Execution, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Pay per use PPU 1.9 - HPE UCS Meter CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

vega-util input validation error vulnerability

vega-util is a JavaScript utility program for Vega. The program provides a function generator, type checker, log messages, and more. An input validation error vulnerability exists in versions of vega-util prior to 1.13.1. The vulnerability stems from a networked system or product that does not...

CVE-2020-10056

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

CVE-2020-10056

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

Design/Logic Flaw

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

CVE-2020-10056

CVE-2020-10056 affects Siemens License Management Utility (LMU) prior to v2.4. The lmgrd service runs with local SYSTEM privileges while its configuration can be modified by local users, enabling a local authenticated attacker to execute arbitrary commands with SYSTEM privileges. Publicly availab...

CVE-2020-10056: Execution with Unnecessary Privileges

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

PT-2020-11886 · Unknown · License Management Utility

Name of the Vulnerable Software and Affected Versions: License Management Utility LMU versions prior to V2.4 Description: A security issue has been identified where the lmgrd service of the affected application runs with local SYSTEM privileges on the server, and its configuration can be modified...

CVE-2020-11133

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130...