Huawei EulerOS: Security Advisory for shadow-utils (EulerOS-SA-2020-1759)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35362)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.15.0, which can be exploited by an attacker to bypass login access controls with the help of specially crafted input...

CVE-2020-3289

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

CVE-2020-3267

A vulnerability in the API subsystem of Cisco Unified Contact Center Express Unified CCX could allow an authenticated, remote attacker to change the availability state of any agent. The vulnerability is due to insufficient authorization enforcement on an affected system. An attacker could exploit...

CVE-2020-3211

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...

CVE-2020-3211 Cisco IOS XE Software Web UI Command Injection Vulnerability

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker who has valid...

OPENSUSE-SU-2020:0757-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Java was updated to jdk-11.0.7+10 April 2020 CPU, bsc1169511. Security issues fixed: - CVE-2020-2754: Fixed an incorrect handling of regular expressions that could have resulted in denial of service bsc1169511. - CVE-2020-2755: Fixed an...

FreeRDP Resource Management Error Vulnerability (CNVD-2020-31428)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A resource management error vulnerability exists in cliprdrserverreceivecapabilities in FreeRDP 2.0.0 and earlier versions. An attacker can exploit the vulnerability with the help of specially craft...

The vulnerability of the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol in Cisco Wireless LAN Controller (WLC) software allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in Cisco Wireless LAN Controller WLC software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending a special...

CVE-2020-3343

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

dotnet: Denial of service via untrusted input

An integer overflow condition was found in dotnet and dotnet3.1's BinaryReader Read7BitEncodedInt method. This method is used by BinaryReader's ReadString method, and given a certain input, and cause a denial of service to dotnet applications using BinaryReader. The exploitation of this flaw...

Apache Camel Netty Code Issue Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

Apache Camel RabbitMQ Code Issue Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern , referred to as EIP integration framework. The framework provides Enterprise Integration Pattern of Java objects POJO implementation ...

RHEL 7 : podman (RHSA-2020:2117)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2117 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use contain...

VulnCheck KEV: CVE-2013-3644

Unspecified vulnerability in JustSystems Ichitaro 2006 through 2013; Ichitaro Pro through 2; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro Portable with oreplug; Ichitaro Viewer; and Ichitaro JUST School through 2010 allows remote attackers to execute arbitrary code via a crafted...

The vulnerability of the `matchCurrentInput` function in the Liblouis translator, allowing a hacker to trigger a service failure.

The vulnerability of the matchCurrentInput function in Liblouis relates to the improper checking of the length of the input string. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created input file...

RLSA-2020:1931 Important: container-tools:2.0 security update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: buildah: Crafted input tar file may lead to local file overwrite during image build process CVE-2020-10696 For more details about the security issues, including the...

exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...