FreeBSD : zeek -- Various vulnerabilities (e333084c-9588-4eee-8bdc-323e02cb4fe0)

Jon Siwek of Corelight reports : This release fixes the following security issues : - Fix potential DNS analyzer stack overflow - Fix potential NetbiosSSN analyzer stack overflow C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBS...

Unspecified Vulnerability in Oracle Financial Services Applications Insurance Accounting Analyzer

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. A security vulnerability exists in Oracle Financial Services Applications Insurance Accounting Analyzer. An attacker could...

zeek -- Various vulnerabilities

Jon Siwek of Corelight reports: This release fixes the following security issues: Fix potential DNS analyzer stack overflow Fix potential NetbiosSSN analyzer stack overflow...

AWStats: Multiple vulnerabilities

Background AWStats is an advanced log file analyzer and statistics generator. Description Multiple vulnerabilities have been discovered in AWStats. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is ...

GLSA-202007-31 : Icinga: Root privilege escalation

The remote host is affected by the vulnerability described in GLSA-202007-31 Icinga: Root privilege escalation It was discovered that Icingas installed files have insecure permissions, possibly allowing root privilege escalation. Impact : A local attacker could escalate privileges to root...

GLSA-202007-03 : Cacti: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-03 Cacti: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Cacti. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-14693

CVE-2020-14693 affects the Oracle Insurance Accounting Analyzer component (Oracle Financial Services Applications). Affected versions are 8.0.6–8.0.9. The vulnerability is exploitable by a low-privilege, unauthenticated network attacker over HTTP and can lead to unauthorized creation, deletion or...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-14693

Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications component: User Interface. Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM eDiscovery Analyzer

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Java™ Version 6 and Java™ Version 7 that is used by IBM eDiscovery Analyzer. These issues were disclosed as part of the IBM Java SDK updates in Apr 2020. Vulnerability Details CVEID: CVE-2020-2830 DESCRIPTION: An...

Server Side Request Forgery Vulnerability in Hitachi Ops Center Analyzer viewpoint

Overview A Server Side Request Forgery Vulnerability was found in Hitachi Ops Center Analyzer viewpoint. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take...

FastNetMon Community - Very Fast DDoS Analyzer With Sflow/Netflow/Mirror Support

FastNetMon - A high performance DoS/DDoS load analyzer built on top of multiple packet capture engines NetFlow, IPFIX, sFlow, AFPACKET, SnabbSwitch, netmap, PFRING obsoleted, PCAP. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic,...

Security Bulletin: A vulnerability in IBM Java Runtime affects Rational Asset Analyzer

Summary There is a vulnerability in IBM® Runtime Environment Java™ used by Rational Asset analyzer. Rational Asset analyzer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An unspecified vulnerability in Java SE related to the Kerberos component could all...

Security Bulletin: A vulnerability in IBM Java Runtime affect Rational Asset Analyzer.

Summary There is a vulnerability in IBM® Runtime Environment Java™ used by Rational Asset analyzer. Rational Asset analyzer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component...

Security Bulletin: Asset Analyzer (RAA) is affected by a WebSphere Application Server vulnerability

Summary Rational Asset Analyzer RAA has addressed the following vulnerability in WebSphere Application Server. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated...

Security Bulletin: Asset Analyzer (RAA) is affected by a WebSphere Application Server vulnerability

Summary Rational Asset Analyzer RAA has addressed the following vulnerability in WebSphere Application Server. Vulnerability Details CVEID: CVE-2020-4329 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational Asset Analyzer

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by Rational Asset analyzer. Rational Asset analyzer has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries...