Dell EMC RSA Archer Input Validation Error Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An input validation error vulnerability exists in versions prior to Dell...

Dell EMC RSA Archer Cross-Site Request Forgery Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site request forgery vulnerability exists in versions prior to De...

Dell EMC RSA Archer Cross-Site Scripting Vulnerability

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site scripting vulnerability exists in versions prior to Dell EMC...

NETGEAR ReadyNAS OS Injection Vulnerability

NETGEAR ReadyNAS OS is a set of operating systems for ReadyNAS network-attached storage devices from NETGEAR. An injection vulnerability exists in NETGEAR ReadyNAS OS versions 6.0 and later fixed in version 6.6.1. The vulnerability arises from a lack of proper validation of user input data by the...

UBUNTU-CVE-2020-12458

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information e.g., cleartext or encrypted datasource passwords...

VMware ESXi Cross-Site Scripting Vulnerability

VMware ESXi is a server virtualization platform from VMware that can be installed directly on physical servers. A cross-site scripting vulnerability exists in VMware ESXi versions 6.5 and 6.7. An attacker can exploit this vulnerability to inject malicious scripts...

CVE-2020-9294

An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to access the system as a legitimate user by requesting a password change via the user interface...

Oracle Virtualization VM VirtualBox Unauthorized Operation Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

NETGEAR RAX40 Input Validation Error Vulnerability

The NETGEAR RAX40 is a wireless router from NETGEAR. A security vulnerability exists in the NETGEAR RN42400 prior to version 6.10.2, which stems from a misconfiguration of security settings. No details of the vulnerability are provided at this time...

VMware vCenter Server Information Disclosure Vulnerability (CNVD-2020-22860)

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. An information disclosure vulnerability exis...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-22987)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in the NDP proxy function of the EVPN leaf node in Juniper Networks Junos O...

Plat'Home EasyBlocks IPv6 Cross-Site Request Forgery Vulnerability

Plat'Home EasyBlocks IPv6 is an IPv6 address set allocation unit product from Plat'Home Japan. A cross-site request forgery vulnerability exists in Plat'Home EasyBlocks IPv6 version 2.0.1 and earlier. The vulnerability stems from a WEB application that does not adequately verify that a request is...

CVE-2020-1613

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

Unspecified vulnerability in CIPPlanner CIPAce (CNVD-2020-21821)

CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. A security vulnerability exists in CIPPlanner CIPAce version 6.80 Build 2016031401. The vulnerability can be exploited by an attacker to obtain the username and password...

CVE-2019-19097

ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection...

libreoffice: Insufficient URL validation allowing LibreLogo script execution

LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...

CVE-2020-3766

Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

Fortinet FortiClient Code Issue Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A code issue vulnerability exists in the...

Dell EMC XtremIO XMS Privilege Assignment Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A security vulnerability exists in Dell EMC XtremIO XMS prior to version 6.3.0, which stems from an incorrect privilege assignment. A local attacker could exploit the vulnerability to gain ro...

mIRC Resource Management Error Vulnerability

mIRC is a Windows-based interconnected relay chat client program. A resource management error vulnerability exists in mIRC versions prior to 6.35. An attacker can exploit this vulnerability to cause a denial of service crash with a long alias...