WP Courses < 2.0.29 - Broken Access Controls leading to Courses Content Disclosure

The plugin does not protect the courses which could be accessed by unauthenticated users using the REST API /wp-jon/ endpoints. This could result in attackers accessing paying content without authorisation...

Brocade Fabric OS Buffer Overflow Vulnerability

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade in the United States. A buffer overflow vulnerability exists in the REST API in Brocade Fabric OS. A remote, unauthenticated attacker could exploit this vulnerability to perform ...

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

CVE-2020-15374

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

Buffer overflow

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

Input validation

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

CVE-2020-15374

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

CVE-2020-15373

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

CVE-2020-15373

CVE-2020-15373 affects Brocade Fabric OS REST API; multiple buffer overflow vulnerabilities in v8.2.1–v8.2.1d and in 8.2.2 prior to 8.2.2c allow remote unauthenticated attackers to perform various attacks. Root cause: REST API buffer overflow. Impact is described as allowing varied attacks (no ex...

CVE-2020-15394

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

Sql injection

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

CVE-2020-15394

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

PT-2020-14400

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 8.2.1 through 8.2.1d Brocade Fabric OS versions 8.2.2 before 8.2.2c Description The issue concerns multiple buffer overflow vulnerabilities in the REST API of Brocade Fabric OS. These vulnerabilities could allow remo...

PT-2020-14401

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions 8.2.1 through 8.2.1d Brocade Fabric OS versions 8.2.2 before 8.2.2c Description The Rest API in Brocade Fabric OS is vulnerable to multiple instances of reflected input. Recommendations For Brocade Fabric OS versions...

CVE-2020-15374: Undefined Security Weakness

Rest API in Brocade Fabric OS v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c is vulnerable to multiple instances of reflected input...

CVE-2020-15373: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflow vulnerabilities in REST API in Brocade Fabric OS versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c could allow remote unauthenticated attackers to perform various attacks...

CVE-2020-15394: Improper Neutralization of Special Elements used in an SQL Command

The REST API in Zoho ManageEngine Applications Manager before build 14740 allows an unauthenticated SQL Injection via a crafted request, leading to Remote Code Execution...

PT-2020-14406

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager versions prior to build 14740 Description The issue concerns an unauthenticated SQL Injection in the REST API, which can be exploited via a crafted request. This leads to Remote Code Execution...

SUSE-SU-2020:2731-1 Security update for conmon, fuse-overlayfs, libcontainers-common, podman

This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 bsc1175821 - install missing systemd units for the new Rest API bsc1175957 and a few man-pages that where missing before - Drop varlink API related bits in favor of the ne...