CVE-2020-11503

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely...

CVE-2020-11503

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely...

Heap overflow

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely...

CVE-2020-11503

CVE-2020-11503 affects Sophos XG Firewall prior to or equal to v17.5 MR11, via a heap-based buffer overflow in the awarrensmtp component that could allow remote code execution. The incident is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE list, PRION, etc.). The exact vu...

CVE-2020-11503

A heap-based buffer overflow in the awarrensmtp component of Sophos XG Firewall v17.5 MR11 and older potentially allows an attacker to run arbitrary code remotely...

BD Alaris PCU (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Becton, Dickinson and Company BD Equipment: Alaris PCU Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35164)

Cisco RV110W and others are a VPN firewall router from Cisco USA. A command injection vulnerability exists in several Cisco products. The vulnerability stems from the failure of the web interface to properly validate user-submitted input and can be exploited by an attacker to execute arbitrary...

MONITORAPP AIWAF-VE and AIWAF-4000 Cross-Site Scripting Vulnerabilities

Monitorapp AIWAF-4000 is an application firewall from MONITORAPP Monitorapp, USA. A cross-site scripting vulnerability exists in MONITORAPP AIWAF-VE and AIWAF-4000 2020-06-16 and earlier versions. The vulnerability stems from a lack of proper validation of client data by the WEB application. An...

Barracuda and Microsoft: Removing security barriers to faster public cloud adoption

Barracuda’s CloudGen Firewall is tightly integrated with Microsoft Azure Virtual WAN, Azure Active Directory Azure AD, Azure Security Center, and Azure Sentinel. Integrated into Azure, Barracuda’s networking and security capabilities enable customers’ secure infrastructure migrations and the use ...

Huawei Secospace USG6300 and USG6300E Information Disclosure Vulnerability

Huawei Secospace USG6300 and USG6300E are both next-generation firewall products from Huawei, China. A security vulnerability exists in the Huawei Secospace USG6300 and USG6300E, which originates from the program failing to perform sufficient input validation. An attacker could exploit the...

Palo Alto Networks GlobalProtect Competitive Conditions Issue Vulnerability

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A competitive conditions issue vulnerability exists in Palo Alto Networks GlobalProtect Windows versions prior to 5.0.10 5.0 an...

CVE-2020-12695

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. Mitigation To mitigate this flaw, close of...

11 security tips to help stay safe in the COVID-19 era

The COVID-19 pandemic has changed our daily routines, the ways we work, and our reliance on technology. Many of us are now working remotely, students are attending classes virtually, and we’re relying more on social media and social networks to stay connected as we define what our new normal look...

Weak Password Vulnerability in SG-6000 Next-Generation Firewall from Shanshi Netcom

SG-6000 Next-Generation Firewall is a firewall product with intrusion prevention technology based on in-depth application, protocol detection and attack principle analysis. A weak password vulnerability exists in SG-6000, which can be exploited by attackers to access the backend management system...

Incorrect Authentication Vulnerability in Multiple Huawei Products (CNVD-2021-93841)

The Huawei USG9500 is a data center firewall product, the NGFW Module is a next-generation firewall NGFW module, and the NIP6800 is an intrusion prevention system. Multiple Huawei products are vulnerable to incorrect authentication. An attacker could exploit the vulnerability to gain certain...

Unpatched Microsoft Systems Vulnerable to CVE-2020-0796

The Cybersecurity and Infrastructure Security Agency CISA is aware of publicly available and functional proof-of-concept PoC code that exploits CVE-2020-0796 in unpatched systems. Although Microsoft disclosed and provided updates for this vulnerability in March 2020, malicious cyber actors are...

Huawei NIP6800, Secospace USG6600 and USG9500 Memory Leak Vulnerabilities (CNVD-2020-36723)

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.Secospace USG6600 is a next-generation firewall product. A security vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500. An attacker...

Huawei Data Communication: Memory Leak Vulnerability in Some Huawei FireWall Products (huawei-sa-20171220-01-firewall)

There has a memory leak vulnerability in some Huawei FireWall Products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Secure Computing SnapGear Management Console SG560 3.1.5 CSRF

Secure Computing SnapGear Management Console SG560 v3.1.5 CSRF Add Super User Vendor: Secure Computing Corp. Product web page: http://www.securecomputing.com Affected version: 3.1.5u1 Summary: The SG gateway appliance range provides Internet security and privacy of communications for small and...

Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read / Write

Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write Vendor: Secure Computing Corp. Product web page: http://www.securecomputing.com Affected version: 3.1.5u1 Summary: The SG gateway appliance range provides Internet security and privacy of communications for small...