net-snmp before 5.8.1.pre1 has a double free in usm_free_usmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions but might not affect an upstream release.

...

PT-2020-14072

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 through 4.5 Description A buffer overflow issue was discovered in the SNMP bulk get request response encoding function. The function does not verify the input message's requested variables against the capacity of the...

CVE-2020-14935: Out-of-bounds Write

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get...

How to Clean up the Credentials Manager in Veeam Backup & Replication

Challenge Over time, duplicate or outdated credentials may be saved in the Credentials Manager of Veeam Backup & Replication. This article documents a process for reviewing and cleaning up the Credentials Manager. Solution No changes to the Credentials Manager account list are saved untilOK is...

DEBIAN-CVE-2019-20892

net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release...

UBUNTU-CVE-2019-20892

net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release...

bulkbagreclamation.com Cross Site Scripting vulnerability OBB-1204404

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Facebook 'Manage Activity' Is a Long Overdue Privacy Feature

The new Manage Activity feature will let you archive and bulk delete posts for the first time...

CVE-2020-13459

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

CVE-2020-13459

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

Cross site scripting

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

CVE-2020-13459

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

CVE-2020-13459

The CVE-2020-13459 entry concerns the Image Resizer plugin for Craft CMS (versions before 2.0.9). The vulnerability is a stored XSS in the Bulk Resize action. Affected component: Image Resizer plugin, Craft CMS ecosystem. Root cause details are not provided beyond the stored XSS description in th...

CVE-2020-13459

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

PT-2020-13549

Name of the Vulnerable Software and Affected Versions Image Resizer plugin versions prior to 2.0.9 for Craft CMS Description The issue concerns stored XSS in the Bulk Resize action. Recommendations For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary...

CVE-2020-13459: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action...

CRLF Injection

php is vulnerable to CRLF injection. A flaw was discovered in the way PHP's mail function processed header data. If a script sent mail using a Subject header containing a string from an untrusted source, a remote attacker could send bulk e-mail to unintended recipients...

net-snmp: double free in usm_free_usmStateReference function in snmplib/snmpusm.c via an SNMPv3 GetBulk request

net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release...

PT-2020-4971 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.5.11 Description: The issue is related to the kmem cache alloc bulk function in the Linux kernel, specifically in the mm/slub.c file. It is associated with errors in executing multithreaded tasks, known as a...

Researchers Uncover a Nigerian Hacker's Pursuit of his Million Dollar Dream

Social engineering-driven malware threats continue to be a big threat, but new research details how cybercriminals profit off such schemes to launder hundreds of thousands of dollars from stolen credit cards of unsuspecting victims. Cybersecurity firm Check Point Research, in a report shared with...