EUVD-2017-11091

Malware in sbrugna...

CVE-2017-20084

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20084

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

Design/Logic Flaw

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20084 JUNG Smart Visu Server KNX Group Address backdoor

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20084 JUNG Smart Visu Server KNX Group Address backdoor

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20084

CVE-2017-20084 affects JUNG Smart Visu Server versions 1.0.804, 1.0.830, 1.0.832. The issue involves the KNX Group Address component, where manipulation can lead to a backdoor. Local access is required to exploit, and publicly disclosed exploit information exists. Mitigation per sources is to upg...

JUNG Smart Visu Server 安全漏洞

JUNG Smart Visu Server is a Smart Visu Server from JUNG. A security vulnerability exists in JUNG Smart Visu Server versions 1.0.804, 1.0.830, 1.0.832, which stems from the fact that a KNX group address can be used with a user-defined password. An attacker exploiting this vulnerability could...

Dovecot < 2.3.9.2 DoS Vulnerability

Dovecot is prone to a denial of service vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

ALPINE-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

UBUNTU-CVE-2019-19722

In Dovecot before 2.3.9.2, an attacker can crash a push-notification driver with a crafted email when push notifications are used, because of a NULL Pointer Dereference. The email must use a group address as either the sender or the recipient...

dovecot -- null pointer deref in notify with empty headers

Aki Tuomi reports Mail with group address as sender will cause a signal 11 crash in push notification drivers. Group address as recipient can cause crash in some drivers...

D-Link DIR-825 Cross-Router Hidden Channel Vulnerability

The D-Link DIR-825 is an AC 1200 Wi-Fi dual-band Gigabit LAN/WAN router. A cross-router hidden channel vulnerability exists in the D-link DIR-825 G1. The vulnerability stems from insufficient isolation between host and client networks established by the same device. The vulnerability can be...

JUNG Smart Visu Server 1.0.8x Path Traversal / Backdoor Accounts

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Path Traversal, Backdoor accounts & KNX group address password bypass product: JUNG Smart Visu Server vulnerable version: Firmware v1.0.804/1.0.830/1.0.832 fixed version:...

JUNG Smart Visu Server < 1.0.900 Multiple Vulnerabilities - Active Check

JUNG Smart Visu Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...