407 matches found
Weak Password Vulnerability in Brickcom FB-200Np Camera
BRICS Communications Technology is a leading global provider of network video solutions. A weak password vulnerability exists in the Brickcom FB-200Np camera, which can be exploited by attackers to obtain sensitive information...
Weak password vulnerability in FB-Series
FLIR Systems, Inc. specializes in the design, development, production, marketing and promotion of specialized technologies for enhanced situational awareness. Through thermal imaging, visible light imaging, video analytics, measurement and diagnostics, and advanced threat detection systems, we...
PT-2021-28222
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 8, with the crash state...
SUSE: Security Advisory (SUSE-SU-2020:2360-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4871-1: targetcli-fb vulnerabilities
It was discovered that targetcli-fb did not properly manage socket permissions. A local attacker could use this issue to modify the iSCSI configuration resulting in a denial of service, obtain sensitive information or execute arbitrary code. CVE-2020-10699 It was discovered that targetcli-fb did...
USN-4871-1 targetcli-fb vulnerabilities
It was discovered that targetcli-fb did not properly manage socket permissions. A local attacker could use this issue to modify the iSCSI configuration resulting in a denial of service, obtain sensitive information or execute arbitrary code. CVE-2020-10699 It was discovered that targetcli-fb did...
PT-2021-10259
Name of the Vulnerable Software and Affected Versions: HHVM versions prior to 4.32.3 HHVM versions 4.33.0 through 4.62.0 Description: The fb unserialize function did not impose a depth limit for nested deserialization, allowing a maliciously constructed string to cause deserialization to recurse...
NewStart CGSL CORE 5.04 / MAIN 5.04 : python-rtslib Vulnerability (NS-SA-2021-0045)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python-rtslib packages installed that are affected by a vulnerability: - Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile instead of shutil.copy is used, and...
Oracle Linux 7 : python-rtslib (ELSA-2020-5435)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5435 advisory. 2.1.74-1.0.1 - Add patch 0005-allow-mixed-case-in-oracle-iqns to fix Orabug: 27613482 - Add patch 0004-allow-underscore-in-oracle-iqns to fix Orabug: 27582660 -...
python-rtslib: weak permissions for /etc/target/saveconfig.json
A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.json because the shutil.copyfile, instead of shutil.copy is used, and permissions are not preserved upon editing. This flaw allows an attacker with prior access to...
Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus
Summary Multiple vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2020-5408 DESCRIPTION: VMware Tanzu Spring Security could allow a remote attacker to obtain...
Oracle Linux 8 : targetcli (ELSA-2020-4697)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-4697 advisory. 2.1.53-1 - Update to new upstream version 2.1.52-1 - Update to new upstream version Tenable has extracted the preceding description block directly from the Orac...
fb-ktn.at Cross Site Scripting vulnerability OBB-1423694
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fb-copyrightshelp.net Cross Site Scripting vulnerability OBB-1386138
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fb-copyrightshelp.net Cross Site Scripting vulnerability OBB-1378525
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fb-news.jp Cross Site Scripting vulnerability OBB-1355359
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
EulerOS Virtualization for ARM 64 3.0.2.0 : python-rtslib (EulerOS-SA-2020-1983)
According to the version of the python-rtslib package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for...
Huawei EulerOS: Security Advisory for python-rtslib (EulerOS-SA-2020-1983)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-202008-22 : targetcli-fb: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202008-22 targetcli-fb: Multiple vulnerabilities Multiple vulnerabilities have been discovered in targetcli-fb. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers...
