The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of backup and data restoration operations for software that manages virtual infrastructure like VMware vCenter Server Appliance is related to deficiencies in verifying the authenticity of certificates. Exploiting this vulnerability can allow an attacker,...

The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the implementation of backup and recovery operations for software that manages virtual infrastructure like VMware vCenter Server Appliance is related to deficiencies in verifying the authenticity of certificates. Exploiting this vulnerability can allow an attacker, operating...

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of Intel Active Management Technology’s microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute cross-site scripting XSS attacks...

The vulnerability of the Intel Active System Console, related to deficiencies in access control, allows a intruder to escalate their privileges.

The vulnerability of the Intel Active System Console is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the embedded microcontroller’s consumer driver, Intel Management Engine, and the microprogramming software Intel Trusted Execution Engine (TXE), allows a perpetrator to enhance their privileges.

The vulnerability of the embedded microcontroller’s consumer driver, Intel Management Engine for Windows, and Intel Trusted Execution Engine TXE software, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the installer of Intel Smart Connect Technology allows a perpetrator to enhance their privileges.

The vulnerability of the Intel Smart Connect Technology software installer is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogrammed software of Intel Ethernet Series 700 controllers, related to access control deficiencies, allows a intruder to trigger a service failure.

The vulnerability of Intel Ethernet Controller Series 700 microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

Debian DLA-2030-1 : jackson-databind security update

More deserialization flaws were discovered in jackson-databind which could allow an unauthenticated user to perform remote code execution. The issue was resolved by extending the blacklist and blocking more classes from polymorphic deserialization. For Debian 8 'Jessie', these problems have been...

Ubuntu 16.04 LTS / 18.04 LTS : Git vulnerabilities (USN-4220-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4220-1 advisory. Joern Schneeweisz and Nicolas Joly discovered that Git contained various security flaws. An attacker could possibly use these issues to...

Serious Security Flaws Found in Children's Connected Toys

Various connected toys for children – hot off the shelves from this holiday shopping season – have been found with deep-rooted security issues, including missing authentication for device pairing and a lack of encryption for connected online accounts. The research, formed by a partnership between...

CVE-2014-0163

CVE-2014-0163 affects OpenShift and is caused by unsanitized data being passed into shell commands, leading to shell command injection. According to NVD, the CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, low attack complexity, privileges required: LOW, and user interaction: NONE;...

The vulnerability of the electronic interaction module of service and official personnel of the “Safe City” hardware-programming platform, related to deficiencies in authentication mechanisms, allows a violator to identify all existing user names.

The vulnerability of the electronic interaction module of the “Safe City” hardware-programming platform relates to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to determine all existing user names by using a brute-force method on the username...

The vulnerability of the electronic interaction module for services and officials of the “Safe City” hardware-programming platform, related to deficiencies in access control mechanisms, allows a violator to gain access to any account.

The vulnerability of the electronic interaction module of the “Safe City” hardware-programming platform relates to deficiencies in access control mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to any account by brute-forcing passwords...

Microsoft Windows Multiple Vulnerabilities (KB4530689)

This host is missing a critical security update according to Microsoft KB4530689 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

USN-4202-2 thunderbird regression

USN-4202-1 fixed vulnerabilities in Thunderbird. After upgrading, Thunderbird created a new profile for some users. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that a specially crafted S/MIME message with an inner encryption laye...

USN-4220-1: Git vulnerabilities

Joern Schneeweisz and Nicolas Joly discovered that Git contained various security flaws. An attacker could possibly use these issues to overwrite arbitrary paths, execute arbitrary code, and overwrite files in the .git directory...

Vulnerability of corporate VPN applications: GlobalProtect Agent for Linux and GlobalProtect Agent for MacOS, which allow attackers to increase their privileges.

The vulnerability of corporate VPN applications, GlobalProtect Agent for Linux and GlobalProtect Agent for MacOS, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerabilities of McAfee Total Protection (MTP), McAfee Anti-Virus Plus (AVP), and McAfee Internet Security (MIS) software lie in their shortcomings regarding the loading of external files and the verification of their digital signatures. This allows attackers to exploit these vulnerabilities to enhance their privileges and execute malicious code.

The vulnerabilities of McAfee Total Protection MTP, McAfee Anti-Virus Plus AVP, and McAfee Internet Security MIS are related to deficiencies in loading external files from inappropriate directories and verifying their digital signatures. Exploiting these vulnerabilities can allow attackers to...

The vulnerabilities of the ViPNet Coordinator HW 4 and ViPNet Coordinator KB 4 systems, related to insufficient validation of input data, allow attackers to exploit these systems to exhaust network resources by combining deleted attacks with the use of fragmented packets.

The vulnerabilities of the ViPNet Coordinator HW 4 and ViPNet Coordinator KB 4 are related to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to cause network resources to be exhausted, resulting in a reboot of the ViPNet Coordinator due to an internal...

MGASA-2019-0347 Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 78.0.3904.108 fixes security issues: Multiple flaws were found in the way Chromium 78.0.3904.87 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information...