13603 matches found
CVE-2020-14688
Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
Security Advisory - Two Vulnerabilities in SaltStack Salt
An authentication bypass vulnerability was discovered in SaltStack Salt. An attacker may exploit the vulnerability to retrieve user tokens from the salt master and/or run arbitrary commands on salt minions. Vulnerability ID: HWPSIRT-2020-05592 This vulnerability has been assigned a Common...
DEBIAN-CVE-2020-15719
libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party package is asserting RFC6125 support. It considers CN even when there is a non-matching subjectAltName SAN. This is fixed in, for example, openldap-2.4.46-10.el8 in Red Hat Enterprise Linux...
Description of the security update for Skype for Business Server 2019 CU 2: July 14, 2020
None None...
CVE-2020-2030
creationtimestamp| type| source ---|---|--- 2020-07-13 17:35:05+00:00| seen| https://t.me/SecLabNews/8054...
Android Security Bulletin—July 2020Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
Cisco IOS and IOS XE Software Common Industrial Protocol Denial of Service (cisco-sa-cipdos-hkfTZXEx)
According to its self-reported version, Cisco IOS XE Software is affected by a multiple vulnerabilities in the implementation of the Common Industrial Protocol CIP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device t...
The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...
CVE-2016-11078
creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:28+00:00| seen| https://t.me/cibsecurity/12941...
CVE-2016-11084
creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:22+00:00| seen| https://t.me/cibsecurity/12935...
CVE-2017-18880
creationtimestamp| type| source ---|---|--- 2020-06-19 22:55:36+00:00| seen| https://t.me/cibsecurity/12927...
CVE-2017-18890
creationtimestamp| type| source ---|---|--- 2020-06-19 22:55:21+00:00| seen| https://t.me/cibsecurity/12917...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Jaeger 1.17.3 container images security update
An update for jaeger-all-in-one-rhel7-container, jaeger-collector-rhel7-container, and jaeger-ingester-rhel7-container is now available for Jaeger-1.17. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...
jackson-databind: improper polymorphic deserialization in jboss-common-core class
A flaw was discovered in jackson-databind, where it would permit polymorphic deserialization of a malicious object using the jboss-common-core class. An attacker could use this flaw to execute arbitrary code...
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system, which allows a hacker to perform arbitrary actions.
The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to perform arbitrary actions...
Huawei Data Communication: Multiple Vulnerabilities Released on Microsoft security advisory 4025685 (huawei-sa-20170909-01-windows)
Microsoft had released a Security Advisory 4025685 on June 14 to fix multiple critical security vulnerabilities in such systems as Microsoft Windows XP, Windows Server 2003, Windows VISTA, and Windows 8. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a...