2346 matches found
CVE-2020-6198
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6198
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6198
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
CVE-2020-6198
CVE-2020-6198 affects SAP Solution Manager (Diagnostics Agent), Version 720. Root cause: Missing authentication allows unencrypted connections from unauthenticated sources, enabling an attacker to remotely control all agent functions. Documents cite high/critical impact (CVSS v3.1 base score 9.8)...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: March 10, 2020
None None...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system could exploi...
Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could bypass access restrictions to delete files. To exploit this vulnerability, an attacker would first hav...
Diagnostic Hub Standard Collector Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a speciall...
CVE-2020-6198: Missing Authentication for Critical Function
SAP Solution Manager Diagnostics Agent, version 720, allows unencrypted connections from unauthenticated sources. This allows an attacker to control all remote functions on the Agent due to Missing Authentication Check...
PT-2020-6763
Name of the Vulnerable Software and Affected Versions SAP Solution Manager Diagnostics Agent version 720 Description The issue is related to the transmission of data in an open format, allowing an attacker to gain unauthorized access to protected information. This is due to a missing authenticati...
PT-2020-1915
Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio and Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector. This...
PT-2020-1862
Name of the Vulnerable Software and Affected Versions Diagnostics Hub Standard Collector Service affected versions not specified Description The issue is related to improper handling of file operations and insecure privilege management in the Diagnostics Hub Standard Collector Service, which is...
PT-2020-1776
Name of the Vulnerable Software and Affected Versions Windows Mobile Device Management MDM Diagnostics affected versions not specified Description The issue is related to improper handling of files or junctions, which can allow an attacker to elevate their privileges using a specially crafted...
KLA11682 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostic Hub Standard...
CVE-2020-10173
Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metacharacters in the pingIpAddress parameter to ping.cgi. Recent assessments: Assessed Attacker Value: ...
TP-Link TL-WR849N Command Execution Vulnerability
The TP-LINK TL-WR849N is a 300mbps WiFi router. A security vulnerability exists in the diagnostics area of the TP-Link TL-WR849N version 0.9.1 4.16. The vulnerability can be exploited by an attacker to execute commands by sending shell metacharacters to the dashboard's route tracing feature...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
Design/Logic Flaw
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
CVE-2020-9374
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...
CVE-2020-9374: Improper Neutralization of Special Elements used in an OS Command
On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature...