DEBIAN-CVE-2020-13230

In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account e.g., permission to view logs...

Manolo GWTUpload Code Issue Vulnerability

Manolo GWTUpload is a library based on HTML and JavaScript , it is mainly used to upload files to a Web server . A security vulnerability exists in server/UploadServlet.java the servlet that handles file uploads in Manolo GWTUpload version 1.0.3. An attacker can exploit this vulnerability with th...

CVE-2020-13128: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java the servlet for handling file upload accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service...

EOS has a fake recharge vulnerability

EOS is a blockchain operating system designed for commercial distributed applications. The vulnerability stems from an improper configuration of a specific parameter delay-sec in cleos. An attacker could use this vulnerability to increase the amount of tokens in an individual's account with a fal...

Delay occurs when you log on to a domain from a computer that is running Windows 7 or Windows Server 2008 R2

Delay occurs when you log on to a domain from a computer that is running Windows 7 or Windows Server 2008 R2 Symptoms Consider the following scenario: You have a roaming user profile or remote home directory on a client computer that is running Windows 7 or Windows Server 2008 R2 in an Active...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200317)

Security Fixes : - kernel: Count overflow in FUSE request leading to use-after-free issues. CVE-2019-11487 - kernel: rtlp2pnoaie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow CVE-2019-17666 - Kernel: KVM: export...

WAGO PFC100/200 Web-Based Management (WBM) Authentication Timing Information Disclosure Vulnerability

Summary An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management WBM web application on WAGO PFC100/200 controllers. The WBM application makes use of the PHP crypt function which can be exploited to disclose hashed user credentials...

Updated glib2.0 packages fix security vulnerability

The updated packages fix a security vulnerability: GSocketClient in GNOME GLib through 2.62.4 may occasionally connect directly to a target address instead of connecting via a proxy server when configured to do so, because the proxyaddr field is mishandled. This bug is timing-dependent and may...

Design/Logic Flaw

A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection AMP in Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated remote attacker to exhaust resources on an affected device. The vulnerability is due to insufficient...

CVE-2020-3181 Cisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability

A vulnerability in the malware detection functionality in Cisco Advanced Malware Protection AMP in Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated remote attacker to exhaust resources on an affected device. The vulnerability is due to insufficient...

February 27, 2020—KB4535996 (OS Builds 18362.693 and 18363.693)

None None...

February 25, 2020—KB4537818 (OS Build 17763.1075)

None None...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2018-1431)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for ntp (EulerOS-SA-2017-1023)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BitDam Study Exposes High Miss Rates of Leading Email Security Systems

Imagine receiving an email from US VP Mike Pence's official email account asking for help because he has been stranded in the Philippines. Actually, you don't have to. This actually happened. Pence's email was hacked when he was still the governor of Indiana, and his account was used to attempt t...

HDX sessions with CWA for HTML5 have a noticeable delay when launching.

Launching a HDX session with theCWA for HTML5 client shows a delay of several seconds. Issue is only seen on client machines with no internet access. Issue only seen with latest HTML5 client - probably version 1909 onwards. Browser logs show that a connection attempt to googletagmanager.com. On...

F5 BIG-IP AFM Input Validation Error Vulnerability

F5 BIG-IP AFM is an advanced firewall product from F5 USA for protection against DDos attacks. An input validation error vulnerability exists in F5 BIG-IP AFM versions 15.0.0 through 15.0.1, 14.0.0 through 14.1.2, and 13.1.0 through 13.1.3.1, which can be exploited by an attacker to cause...

The vulnerability of the graphical administration tool for domain management, fly-admin-gmc, in the FLY operating system of Astra Linux, related to improper access control, allows a perpetrator to trigger a service failure.

The vulnerability of the graphical administration tool for domain management, fly-admin-gmc, in the FLY environment of the Astra Linux operating system is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a...

The vulnerability in the program for installing, updating, and removing software packages from the Astra Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the program for installing, updating, and removing software packages in the Astra Linux operating system is related to the correction of the update delay of packages. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux, related to improper access control, allows a intruder to trigger a service failure.

The vulnerability of the fly-admin-gmc-se component in the FLY operating system environment of Astra Linux is related to an error that causes a significant delay in opening a folder with the ELF filter enabled. Exploiting this vulnerability allows a remote attacker to cause a service failure...