CVE-2020-0675: Undefined Security Weakness

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

CVE-2020-0676: Undefined Security Weakness

An information disclosure vulnerability exists in the Cryptography Next Generation CNG service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update...

KB4537776: Windows 10 February 2020 Security Update

The remote Windows host is missing security update 4537776. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2020-04062)

LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in getnextownedentity in dwg.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a denial of service...

How the US Knew Iranian Missiles Were Coming Before They Hit

The US has operated an extensive network of missile warning systems for over half a century, but next-generation missiles will put it to the test...

PT-2019-16083

Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF Next function located in GPMF parser.c. Recommendations For GoPro GPMF-parser version 1.2.3, consider applying a patch or fix that...

DEBIAN-CVE-2019-20018

A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17...

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. This allows an attacker to exploit their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...

Out-of-bounds read vulnerability in multiple Huawei products (CNVD-2020-36735)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. An out-of-bounds read vulnerability exists in multiple Huawei products. The...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36734)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer overflow vulnerability exists in multiple Huawei products. An...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36733)

Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer error vulnerability exists in multiple Huawei products that arises...

WordPress quiz-master-next cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. quiz-master-next is a survey plugin used in it. A cross-site scripting vulnerability exists in WordPress quiz-master-next versions pri...

Security feature bypass

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

UBUNTU-CVE-2013-0342

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...

Policy Compliance Library Updates, November 2019

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security

The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...

A Web-Driven World Needs Better Web Security

Web interfaces are everywhere. From social media sites to online shopping portals to your CRM, the humble web interface is now used to access much of the online world. So, it isn’t difficult to see why web applications are a prime target for cybercriminals. Because they’re used by customers and...

Juniper JSA10975

According to the self reported version of Junos OS on the remote device it is affected by a path traversal vulnerability with the Next-Generation Routing Engine. A local authenticated attacker can exploit this, to read sensitive file systems. Note that Nessus has not tested for this issue but has...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...