2487 matches found
libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients
It was discovered that libvirtd would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would...
CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...
CVE-2019-11991
HPE has identified a vulnerability in HPE 3PAR Service Processor SP version 4.1 through 4.4. HPE 3PAR Service Processor SP version 4.1 through 4.4 has a remote information disclosure vulnerability which can allow for the disruption of the confidentiality, integrity and availability of the Service...
Cynet Launches Free Offering For Incident Response Service Providers
More and more, organizations take the route of outsourcing incident response to Managed Security Service Providers. This trend is distinct regardless of the organization's cyber maturity level and can be found across a wide range of cyber maturity, from small companies with no dedicated security...
libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients
It was discovered that libvirtd would permit readonly clients to use the virDomainManagedSaveDefineXML API, which would permit them to modify managed save state files. If a managed save had already been created by a privileged user, a local attacker could modify this file such that libvirtd would...
CVE-2019-1891
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web...
CVE-2019-1892
A vulnerability in the Secure Sockets Layer SSL input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS...
Input validation
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper validation of requests sent to the web...
CVE-2019-1892
CVE-2019-1892 affects Cisco Small Business 200/300/500 Series Managed Switches. The vulnerability resides in the SSL input packet processor where HTTPS packets are not properly validated, allowing an unauthenticated remote attacker to trigger memory corruption and a device reload, causing DoS. Ex...
Siemens SCALANCE XR524-8C Managed IE Switch
Binary data 764610.prm...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764619.prm...
Siemens SCALANCE XR552-12M Managed IE Switch
Binary data 764626.prm...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764620.prm...
Siemens SCALANCE XR524-8C Managed IE Switch
Binary data 764613.prm...
Siemens SCALANCE XR524-8C Managed IE Switch
Binary data 764612.prm...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764621.prm...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764617.prm...
Siemens SCALANCE XR526-8C Managed IE Switch
Binary data 764618.prm...