5587 matches found
KB4537762: Windows 10 Version 1803 February 2020 Security Update
The remote Windows host is missing security update 4537762. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...
GNU LibreDWG Null Pointer Dereference Vulnerability (CNVD-2020-04062)
LibreDWG is a free C library for reading and writing DWG files. A null pointer dereference vulnerability exists in getnextownedentity in dwg.c in GNU LibreDWG 0.9.3.2564. An attacker can exploit this vulnerability to cause a denial of service...
How the US Knew Iranian Missiles Were Coming Before They Hit
The US has operated an extensive network of missile warning systems for over half a century, but next-generation missiles will put it to the test...
PT-2019-16083
Name of the Vulnerable Software and Affected Versions GoPro GPMF-parser version 1.2.3 Description The issue is related to a heap-based buffer over-read in the GPMF Next function located in GPMF parser.c. Recommendations For GoPro GPMF-parser version 1.2.3, consider applying a patch or fix that...
DEBIAN-CVE-2019-20018
A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17...
Intel NUC Kit Buffer Overflow DoS
The vulnerability in the built-in software of the Intel NUC Kit relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause system failures, or gain unauthorized access to protected information...
Out-of-bounds read vulnerability in multiple Huawei products (CNVD-2020-36735)
Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. An out-of-bounds read vulnerability exists in multiple Huawei products. The...
Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36734)
Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer overflow vulnerability exists in multiple Huawei products. An...
Buffer overflow vulnerability in multiple Huawei products (CNVD-2020-36733)
Huawei AP2000 and others are products of Huawei, China.Huawei AP2000 is a wireless access point device.Huawei IPS Module is an intrusion prevention system IPS module.NGFW Module is a next-generation firewall NGFW module. A buffer error vulnerability exists in multiple Huawei products that arises...
WordPress quiz-master-next cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. quiz-master-next is a survey plugin used in it. A cross-site scripting vulnerability exists in WordPress quiz-master-next versions pri...
Security feature bypass
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
UBUNTU-CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294...
Policy Compliance Library Updates, November 2019
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...
Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security
The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...
A Web-Driven World Needs Better Web Security
Web interfaces are everywhere. From social media sites to online shopping portals to your CRM, the humble web interface is now used to access much of the online world. So, it isn’t difficult to see why web applications are a prime target for cybercriminals. Because they’re used by customers and...
Juniper JSA10975
According to the self reported version of Junos OS on the remote device it is affected by a path traversal vulnerability with the Next-Generation Routing Engine. A local authenticated attacker can exploit this, to read sensitive file systems. Note that Nessus has not tested for this issue but has...
CVE-2019-0074
A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...
CVE-2019-0074
A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...
CVE-2019-0066
An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...
Path traversal
A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...