4304 matches found
Huawei Data Communication: Deploying BGP Authentication and GTSM
BGP MD5 authentication and GTSM are configured to prevent attackers from attempting to use protocols on the control plane to damage entries on which forwarding depends, such as routes. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, an...
How to Clean up the Credentials Manager in Veeam Backup & Replication
Challenge Over time, duplicate or outdated credentials may be saved in the Credentials Manager of Veeam Backup & Replication. This article documents a process for reviewing and cleaning up the Credentials Manager. Solution No changes to the Credentials Manager account list are saved untilOK is...
SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:1860-1)
This update for permissions fixes the following issues : Removed conflicting entries which might expose pcp to security issues bsc1171883 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...
SUSE SLES12 Security Update : permissions (SUSE-SU-2020:1857-1)
This update for permissions fixes the following issues : Removed conflicting entries which might expose pcp to security issues bsc1171883 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...
SUSE-SU-2020:1857-1 Security update for permissions
This update for permissions fixes the following issues: - Removed conflicting entries which might expose pcp to security issues bsc1171883...
CVE-2020-4072
In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem...
CVE-2020-4072
In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem...
Authentication flaw
In generator-jhipster-kotlin version 1.6.0 log entries are created for invalid password reset attempts. As the email is provided by a user and the api is public this can be used by an attacker to forge log entries. This is vulnerable to https://cwe.mitre.org/data/definitions/117.html This problem...
CVE-2020-4072
CVE-2020-4072 affects generator-jhipster-kotlin 1.6.0. It allows log forging by creating log entries for invalid password reset attempts using a user-provided email; the issue arises in applications generated with JWT or session authentication (OAuth apps are not affected). The root cause is logg...
Fedora 31 : tcpreplay (2020-256ac53cc7)
This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...
Fedora 32 : tcpreplay (2020-f47830961a)
This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...
Python Resource Management Error Vulnerability (CNVD-2020-52841)
Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in the IPv4Interface and IPv6Interface of the Lib/ipaddress.py file in...
CVE-2020-5304: Improper Encoding or Escaping of Output
The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...
Stored XSS vulnerability in script-security
script-security 1.72 and earlier does not correctly escape pending or approved classpath entries on the In-process Script Approval page. This results in a stored cross-site scripting XSS vulnerability exploitable by users able to configure sandboxed scripts. script-security 1.73 escapes pending a...
Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2020-33485)
Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti WorkSpace Control versions prior to 10.4.40.0, which...
Huawei Data Communication: Deploying OSPFv3 Authentication
OSPFv3 HMAC-SHA256 authentication is deployed to prevent attackers from attempting to use control plane protocols to destroy entries on which forwarding depends, such as routes. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
CVE-2020-12697
The directmail extension through 5.2.3 for TYPO3 allows Denial of Service via log entries...
CVE-2020-12697
The CVE-2020-12697 entry affects the TYPO3 Direct Mail extension (direct_mail) up to version 5.2.3. Root cause: a logging mechanism for link clicks has no cap on log entry generation, enabling an attacker to cause excessive log writes and trigger a denial of service. Impact is described as DoS vi...
