CVE-2020-10871

In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list of installed packages and services. NOTE: the vendor disputes the significance of this report because, for instances reachable by an unauthenticated actor, the same information is available in other more complex ways...

PT-2020-12389 · Openwrt · Openwrt Luci

Name of the Vulnerable Software and Affected Versions: OpenWrt LuCI versions git-20.x Description: The issue allows remote unauthenticated attackers to retrieve the list of installed packages and services. The vendor disputes the significance of this report, stating that the same information is...

CVE-2018-20333

An issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request /updateapplist.asp to see if a USB device is attached to the router and if there are apps installed on the router...

The Supplemental Grace Period is active and all installed licenses are currently in use

This alertisseen on the Director andCitrix Studio. The Supplemental Grace Period is active and all installed licenses are currently in use License server status on Director shows "not connected"...

The vulnerabilities of the iw_troubleshoot, iw_onekey, and iw_webs components of the wireless access point software for Moxa AWK-3131A industrial systems allow attackers to create their own diagnostic scenarios.

The vulnerability of the iwtroubleshoot, iwonekey, and iwwebs components of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow attackers to create their own diagnostic scenari...

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to disclose protected information.

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Adobe After Effects Installed

Binary data adobeaftereffectsinstalled.nbin...

Spring AMQP Installed

Binary data pivotalsoftwarespringamqpinstalled.nbin...

Spring Data JPA Installed

Binary data pivotalsoftwarespringdatajpainstalled.nbin...

Spring Security OAuth Installed

Binary data pivotalsoftwarespringsecurityoauthinstalled.nbin...

Spring Boot Installed

Binary data pivotalsoftwarespringbootinstalled.nbin...

VMware Carbon Black Cloud Endpoint Standard Installed (Windows)

Binary data vmwarecarbonblackcloudendpointstandardwininstalled.nbin...

Apple Security Update: watchOS 5.3.5

Apple recommends to install security update watchOS 5.3.5 on devices Apple Watch Series 1, Apple Watch Series 2, Apple Watch Series 3, and Apple Watch Series 4 when paired to an iPhone with iOS 12 installed...

PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks

The PostgreSQL project reports: Versions Affected: 9.6 - 12 The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization checks, which can allow an unprivileged user to drop any function, procedure, materialized view, index, or trigger under certain conditions. This attack is...

Android Trojan xHelper uses persistent re-infection tactics: here’s how to remove

We first stumbled upon the nasty Android Trojan xHelper, a stealthy malware dropper, in May 2019. By mid-summer 2019, xHelper was topping our detection charts—so we wrote an article about it. After the blog, we thought the case was closed on xHelper. Then a tech savvy user reached out to us in...

Trend Micro Worry-Free Business Security Advanced Server Installed (Windows)

Binary data trendmicroserverwininstalled.nbin...

npm: Global node_modules Binary Overwrite

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

Huawei EulerOS: Security Advisory for libreoffice (EulerOS-SA-2019-2169)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OTRS 6.0.x < 6.0.25, 7.0.x < 7.0.14 Message Vulnerability

OTRS is prone to a vulnerability where it is possible to send drafted messages as wrong agent. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Important: Red Hat Bug Fix Advisory: idm:DL1 bug fix update

An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Bug Fixes: IPA upgrade fails for latest ipa package when adtrust is installed BZ1773516...