PT-2022-5300 · Cisco · Cisco Ata 190 Series Adaptive Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Adaptive Telephone Adapter firmware affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to cause a Denial of Service D...

Cisco ATA 190 代码注入漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has a code injection vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute code, caus...

PT-2022-6175 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: The issue is related to the implementation of the Cisco Discovery Protocol in the firmware of Cisco Analog Telephone Adapter ATA series 190 devices. It...

Cisco ATA 190 输入验证错误漏洞

The ATA 190, ATA 191, and ATA 192 is a Cisco ATA 190 series analog phone adapter. An input validation error vulnerability exists in the Cisco ATA 190 local deployment only, ATA 191 local deployment or multi-platform deployment, and ATA 192 multi-platform deployment only, which stems from a securi...

Cisco ATA 190 输入验证错误漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco, U.S.A. An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation in certain LLDP packet header fields. An unauthenticated, remote attacker could exploit the vulnerability to...

PT-2022-6066 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to execute arbitrary code on an affected...

CISA Orders Federal Agencies to Regularly Track Network Assets and Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency CISA has issued a new Binding Operational Directive BOD that directs federal agencies in the country to keep track of assets and vulnerabilities on their networks six months from now. To that end, Federal Civilian Executive Branch FCEB...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of the Junos operating system is related to a memory leak in the control protocol daemon l2cpd. Exploiting this vulnerability can allow an attacker to trigger a service failure using a specially crafted LLDP packet...

CVE-2022-42307

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to an XML External Entity XXE Injection attack through the DiscoveryService service...

CVE-2022-42305

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service...

CVE-2022-42305

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a Path traversal attack through the DiscoveryService service...

CVE-2022-42299

An issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The NetBackup Primary server is vulnerable to a denial of service attack through the DiscoveryService service...

PT-2022-26354 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions prior to 10.0.0.1 Veritas related products affected versions not specified Description: An issue was discovered that makes the NetBackup Primary server vulnerable to a denial of service attack through the...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A security vulnerabili...

Backdoor.Win32.NTRC MVID-2022-0646 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/273fd3f33279cc9c0378a49cf63d7a06.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NTRC Vulnerability: Weak Hardcoded Credentials Family: NTRC Type: PE32 MD5:...

PT-2022-26362 · Veritas · Netbackup

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup versions through 10.0.0.1 Description: An issue was discovered that makes the NetBackup Primary server vulnerable to an XML External Entity XXE Injection attack. This attack is possible through the DiscoveryService service...

Veritas NetBackup 路径遍历漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A path traversal...

GSD-2022-1006443 ieee802154: cc2520: add rc code in cc2520_tx()

ieee802154: cc2520: add rc code in cc2520tx This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.294 by commit...

GSD-2022-1006440 drm/radeon: add a force flush to delay work when radeon

drm/radeon: add a force flush to delay work when radeon This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.258 by commit...

GSD-2022-1006437 debugfs: add debugfs_lookup_and_remove()

debugfs: add debugfslookupandremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.258 by commit ebfb744bb6036485dac2a45c46e82b911c3726d1...