CVE-2020-8903

Removed by vendor...

CVE-2020-8907

Removed by vendor...

PT-2020-20360 · Google Cloud Platform +1 · Guest-Oslogin +1

Name of the Vulnerable Software and Affected Versions: Google Cloud Platform's guest-oslogin versions 20190304 through 20200507 Description: A vulnerability in Google Cloud Platform's guest-oslogin allows a user with the role "roles/compute.osLogin" to escalate privileges to root. This is achieve...

Huawei FusionAccess Input Validation Error Vulnerability

Huawei FusionAccess is a virtual desktop application based on Huawei Cloud Platform from Huawei China. An input validation error vulnerability exists in Huawei FusionAccess versions prior to 6.5.1.SPC002, which stems from insufficient validation of specific input by the program. An attacker can...

SQL Injection Vulnerability in Intelligent Senior Living Cloud Platform

Guangxi Jinzhong Software Co., Ltd. is a high-tech IT enterprise integrating software development, website construction, network engineering, system integration and maintenance services, communication value-added business and ISP operation services. There is a SQL injection vulnerability in the...

PT-2020-13247 · Hashicorp +1 · Hashicorp Vault +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions 1.4.0 through 1.4.1 Description: The issue arises when HashiCorp Vault and Vault Enterprise are configured with the GCP Secrets Engine, potentially leading to the incorrect generation of GCP...

USN-4363-1: Linux kernel vulnerabilities

It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494 It was discovered that the linux kernel did not properly validate certain mount options to the...

Catalog Traversal Vulnerability in the Electricity Cloud Platform of Ankorui Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. A directory traversal vulnerability exists in the Ankrui Electric Company Limited Intelligent Electrici...

USN-4367-1: Linux kernel vulnerabilities

It was discovered that the btrfs implementation in the Linux kernel did not properly detect that a block was marked dirty in some situations. An attacker could use this to specially craft a file system image that, when unmounted, could cause a denial of service system crash. CVE-2019-19377 It was...

Privilege Escalation in Google Cloud Platform – Part 2 (Non-IAM)

The post Privilege Escalation in Google Cloud Platform - Part 2 Non-IAM appeared first on Rhino Security Labs...

Privilege Escalation in Google Cloud Platform – Part 1 (IAM)

The post Privilege Escalation in Google Cloud Platform - Part 1 IAM appeared first on Rhino Security Labs...

SQL Injection Vulnerability in Smart Electricity Cloud Platform of Ankre Electric Co.

Anchorui Electric Co., Ltd Smart Electricity Cloud Platform is a set of electrical fire early warning and prevention management system developed for the frequent occurrence of electrical fires. There is a SQL injection vulnerability in Ankre Electric Co., Ltd.'s Intelligent Electricity Cloud...

Qualys Cloud Platform 10.1.0 New Features

The upcoming release of the Qualys Cloud Platform VM, PC, version 10.1.0, includes several new features and enhancements in Qualys Cloud Platform and Qualys Policy Compliance. This release will also add support for new technologies in Qualys Policy Compliance for OCA. 10.1.0 is scheduled to go li...

CVE-2020-7133

A unauthorized remote access vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

CVE-2020-7134

A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP versions: 1.4.0, 1.4.1, 1.4.2, 1.2.4.2...

Unauthorized Access Vulnerability in ZStack Cloud Platform

ZStack cloud platform for Yanbian Agricultural and Commercial Bank through the "management node HA + storage dual-activity" solution to achieve high-availability architecture, to create an elastic, stable private cloud platform, showing excellent agile delivery capabilities. There is an...

Qualys Response to Rapid7’s False Claims on VMDR

As remote working is becoming the need of the hour, IT and Security teams are working tirelessly to ensure continuity of services and deliver on all aspects of the business. To help our customers in these challenging times, we launched a 60-day no-cost ‘Remote Endpoint Protection’ service for...

USN-4325-1: Linux kernel vulnerabilities

It was discovered that the IPMI message handler implementation in the Linux kernel did not properly deallocate memory in certain situations. A local attacker could use this to cause a denial of service kernel memory exhaustion. CVE-2019-19046 Al Viro discovered that the vfs layer in the Linux...

Announcing the Release of Malware Prevention for Linux

The VMware Carbon Black team has a mission to keep your entire organization safe from cyber attacks. To deliver on this for today’s landscape, the Carbon Black Cloud platform has added malware prevention for Linux to bring the entire protection lifecycle to Windows, macOS, and Linux. With Linux n...

Qualys Cloud Platform 3.0 New Features

This release of the Qualys Cloud Platform version 3.0 includes updates and new features for Vulnerability Management, highlights as follows. Vulnerability Management The following features apply to all subscriptions that are currently using the Vulnerability Management Dashboard beta. With this...