2616 matches found
Security Bulletin: Under specialized conditions, IBM® Db2® is vulnerable to denial of service (CVE-2019-4101).
Summary Db2 is vulnerable to a denial of service. Users that have both EXECUTE on PDGETDIAGHIST and access to the diagnostic directory on the DB2 server can cause the instance to crash. Vulnerability Details CVEID: CVE-2019-4101 DESCRIPTION: DB2 for Linux, UNIX and Windows includes DB2 Connect...
Security Bulletin: Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation (CVE-2018-1922, CVE-2018-1923, CVE-2018-1978, CVE-2018-1980, CVE-2019-4015, CVE-2019-4016).
Summary Multiple buffer overflow vulnerabilities exist in IBM® Db2® leading to privilege escalation from an authenticated local user to either root or instance owner. Vulnerability Details CVEID: CVE-2018-1922 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server is affecte...
CVE-2019-17647
An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter...
CVE-2019-10569
Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, APQ8098, MDM9607, MDM9640, MSM8998, QCS605, SC8180X, SDM439, SDM630, SDM636, SDM660,...
Stack overflow
Stack buffer overflow due to instance id is misplaced inside definition of hardware accelerated effects in makefile in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile in APQ8053, APQ8098, MDM9607, MDM9640, MSM8998, QCS605, SC8180X, SDM439, SDM630, SDM636, SDM660,...
CVE-2019-17647: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection exists via the include/monitoring/status/Hosts/xml/hostXML.php instance parameter...
Razer: Helpdesk takeover (subdomain takeover) in razerzone.com domain via unclaimed Zendesk instance
The tester discovered a Razer subdomain subject to a takeover. Although we do not normally accept these as part of this program, Razer thanks the tester for his report...
Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability (cisco-sa-20190515-iosxr-evpn-dos)
According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the Border Gateway Protocol BGP Multiprotocol Label Switching MPLS-based Ethernet VPN EVPN implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a denial ...
CVE-2019-20401: Cross-Site Request Forgery (CSRF)
Various installation setup resources in Jira before version 8.5.2 allow remote attackers to configure a Jira instance, which has not yet finished being installed, via Cross-site request forgery CSRF vulnerabilities...
Updated tomcat packages fix security vulnerabilities
When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack to capture user...
CVE-2012-6302
Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox...
CVE-2015-5278
The ne2000receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service infinite loop and instance crash or possibly execute arbitrary code via vectors related to receiving packets...
h1-ctf: [h1-415 2020] @_bayotop h1-415-ctf writeup
TL;DR: Thanks for the challenge! 1. Abusing account recovery via QR codes to get access to [email protected]. 2. Blind XSS in /support/review/ including CSP bypass. 3. Missing input sanitization on name parameter when POSTing to /support/review/. 4. Access to remote debugging port on local...
[SECURITY] Fedora 31 Update: knot-resolver-4.3.0-1.fc31
The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is...
CVE-2019-19750
minerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product...
PT-2019-15947 · Minerstat · Msos
Name of the Vulnerable Software and Affected Versions: minerstat msOS versions prior to 2019-10-23 Description: The issue is related to the lack of unique SSH keys for each instance of the product. This could potentially lead to security risks. Recommendations: For versions prior to 2019-10-23,...
How to Reset Password in Veeam Backup for AWS
Related User Guide Page Veeam Backup for AWS User Guide: Accessing Web UI from Workstation Challenge You may need to reset a password in Veeam Backup for AWS. Solution Make sure that the machine you are using for troubleshooting is in the list of allowed IP addresses in the Security Groups of you...
Veeam Backup for AWS Recovery/Migration Procedure
Purpose This article documents how to recover or migrate Veeam Plug-In for AWS data to a new instance. Solution Recommended Method Starting with Veeam Plug-In for AWS 5.0, Configuration Backup and Restore is available and is now the simplest way to restore/migrate. Performing Configuration Backup...
Design/Logic Flaw
The admin sys mode is now conditional and dedicated for the special case. By default, since email protected no instance container is launched with advanced capabilities not launched as root...