OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

Hacker Leaks More Than 500K Telnet Credentials for IoT Devices

A hacker has published a list of credentials for more than 515,000 servers, home routers and other Internet of Things IoT devices online on a popular hacking forum in what’s being touted as the biggest leak of Telnet passwords to date, according to a published report. The leak—revealed in a repor...

The vulnerability of Brodade’s IP and SAN network management system, related to deficiencies in user account storage, allows unauthorized access to protected information by attackers.

The vulnerability of the Brocade Network Advisor system for managing IP networks and Storage Area Networks is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through access to the JMX console...

Critical Cisco Flaws Now Have PoC Exploit

Proof-of-concept exploit code has been published for critical flaws impacting the Cisco Data Center Network Manager DCNM tool for managing network platforms and switches. The three critical vulnerabilities in question CVE-2019-15975, CVE-2019-15976, CVE-2019-15977 impact DCNM, a platform for...

CVE-2020-2584 vulnerabilities

Vulnerabilities for packages: mysql...

The vulnerability of the REST Interface Version 2 interface of the SAP Identity Management tool allows a perpetrator to elevate their privileges.

The vulnerability of the REST Interface Version 2 interface of the SAP Identity Management tool relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Microsoft Excel 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4484243)

This host is missing an important security update according to Microsoft KB4484243 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

The vulnerability of the SAP Treasury and Risk Management software regarding access control deficiencies allows attackers to enhance their privileges.

The vulnerability of the SAP Treasury and Risk Management software for managing financial instruments and risks is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Microsoft Windows Multiple Vulnerabilities (KB4534306)

This host is missing a critical security update according to Microsoft KB4534306 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of Huawei Band 2 and Honor Band 3’s software allows unauthorized access, enabling intruders to increase their privileges.

The vulnerability of Huawei Band 2 and Honor Band 3 software relates to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

USN-4227-1 linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...

CVE-2019-15975

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these...

CVE-2019-15976

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these...

CVE-2019-15977

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these...

Fedora 30 : git (2019-1cec196e20)

Per the upstream release announcement¹, this release fixes 'various security flaws, which allowed an attacker to overwrite arbitrary paths, remotely execute code, and/or overwrite files in the .git/ directory etc. See the release notes attached for the list for their descriptions and CVE...

The vulnerabilities of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors D allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information.

Vulnerability of microprogramming software for Intel Xeon Scalable Processors, 2nd Generation Intel Xeon Scalable Processors, and Intel Xeon Processors: exploitation may allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to access control deficiencies, allows a perpetrator to send arbitrary requests to the server through the PI Axis adapter.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the server through the PI Axis adapter...

The vulnerability of the McAfee Advanced Threat Defense software arises from insufficient validation of input data, allowing a perpetrator to gain unauthorized access to the atduser account information.

The vulnerability of the McAfee Advanced Threat Defense security tool exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain unauthorized access to the atduser account through specially crafted GET requests...