Google Chrome < 81.0.4044.129 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 81.0.4044.129. It is, therefore, affected by multiple vulnerabilities as referenced in the 202004stable-channel-update-for-desktop27 advisory. - Use after free in task scheduling in Google Chrome prior to 81.0.4044.129...

OTRS 5.0.x < 6.0.28, 7.0.x < 7.0.17 Information Disclosure Vulnerability (OSA-2020-11)

OTRS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if...

CVE-2020-8481 ABB Central Licensing System - Information disclosure

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody...

CVE-2020-8471

CVE-2020-8471 affects ABB Central Licensing System (CLS) across multiple ABB products (800xA, Compact HMI, Symphony Plus, Harmony/Melody components, Knowledge Manager, etc.). The root issue is weak file permissions on the CLS, allowing an authenticated attacker to block license handling, escalate...

CVE-2020-1774

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...

CVE-2020-1774

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...

CVE-2020-1774

CVE-2020-1774 affects the Open-Source Ticket Request System (OTRS) versions: Community Edition 5.0.42 and earlier, 6.0.27 and earlier, and OTRS 7.0.16 and earlier. The issue arises when downloading PGP or S/MIME keys/certificates: the exported files share the same name for private and public keys...

CVE-2020-1774 Information disclosure

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...

Command Execution Vulnerability in the InRouter615-S Series Industrial LTE Router from Johntons

The InRouter615-S series industrial LTE router is a 4G industrial router. A command execution vulnerability exists in the InRouter615-S Series Industrial LTE Router, which can be exploited by attackers to execute malicious code...

Debian: Security Advisory (DLA-2185-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

The CVE-2020-6212 entry affects SAP ERP and SAP S/4HANA. Specifically, it concerns Egypt localization reports: Clearing of Liabilities, Remittance Statement, and Summary for SAP ERP versions 618, 730, EAPPLGLO 607, and SAP S/4 HANA versions 100–104. The root cause is Missing Authorization Check, ...

CVE-2020-12054

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter a search query. Also affected are 16 themes if the plugin is enabled by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise...

Cross site scripting

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter a search query. Also affected are 16 themes if the plugin is enabled by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise...

Important: http-parser

Issue Overview: A flaw was found in the Node.js code where a specially crafted HTTPs request sent to a Node.js server failed to properly process the HTTPs headers, resulting in a request smuggling attack. An attacker can use this flaw to alter a request sent as an authenticated user if the Node.j...

ABB Telephone Gateway TG/S and Busch-Jaeger Telefon-Gateway Privilege Permission and Access Control Issues Vulnerabilities

The ABB Telephone Gateway TG/S and the Busch-Jaeger 6186/11 Telefon-Gateway are both a telephone gateway product from ABB Switzerland. A privileged license and access control vulnerability exists in the ABB Telephone Gateway TG/S version 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway version, which...

Oracle WebLogic Server Detection Consolidation

Consolidation of Oracle WebLogic detections. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

Ubuntu 16.04 LTS : Thunderbird vulnerabilities (USN-4335-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4335-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an...