CVE-2020-7326

Improperly implemented security check in McAfee Active Response MAR prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed...

Design/Logic Flaw

Improperly implemented security check in McAfee Active Response MAR prior to 2.4.4 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MAR failing open rather than closed...

CVE-2020-7327 McAfee MVEDR - Improperly implemented security check

Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...

CVE-2020-7327

The CVE-2020-7327 entry affects McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to version 3.2.0. The root cause is an improperly implemented security check that can let local administrators run malicious code by stopping a core Windows service, which leaves the McAfee core tr...

CVE-2020-7326

The CVE-2020-7326 issue affects McAfee Active Response (MAR) prior to version 2.4.4. A security check was improperly implemented, allowing local administrators to execute malicious code by stopping a core Windows service, leaving the McAfee core trust component in an inconsistent state and causin...

webkitgtk: Incorrect security check for a top-level DOM object context

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-1958)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

How to Check Your Devices for Stalkerware

You deserve privacy. Here's how to check your phone, laptop, and online accounts to make sure no one's looking over your shoulder...

Veeam Cloud Connect jobs fail with "Authentication failed because the remote party has closed the transport stream" error

Challenge After upgrade of Veeam Backup & Replication on the Veeam Cloud Connect service provider's backup server to version 10, tenant jobs may start failing with the following error: "Authentication failed because the remote party has closed the transport stream ". At the same time, the...

openSUSE Security Update : python-rpyc (openSUSE-2020-685)

This update for python-rpyc to 4.1.5 fixes the following issues : Security issue fixed : - CVE-2019-16328: Fixed a missing protocol security check that could have led to code execution boo1152987. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

Access Control Bypass

kernel is vulnerable to access control bypass. A missing security check in the Linux kernel's implementation of the installspecialmapping function could allow a local, unprivileged user to bypass the mmapminaddr protection mechanism...

Cross site scripting

Wowza Streaming Engine 4.8.0 and earlier from multiple authenticated XSS vulnerabilities via the 1 customList%5B0%5D.value field in enginemanager/server/serversetup/editadv.htm of the Server Setup configuration or the 2 host field in enginemanager/jspringsecuritycheck of the login form. This issu...

Fedora Update for znc FEDORA-2019-233d9b9a5e

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-17650

An Improper Neutralization of Special Elements used in a Command vulnerability in one of FortiClient for Mac OS root processes, may allow a local user of the system on which FortiClient is running to execute unauthorized code as root by bypassing a security check...

Fedora Update for nspr FEDORA-2019-e4c45e113c

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FusionPBX Command exec.php Command Execution

This module uses administrative functionality available in FusionPBX to gain a shell. The Command section of the application permits users with execview permissions, or superadmin permissions, to execute arbitrary system commands, or arbitrary PHP code, as the web server user. This module has bee...

PBS Professional 19.2.3 Authentication Bypass

=========================================================== PBS Professional MoM Authentication Bypass CVE-2019-15719 =========================================================== Software: PBS Professional Affected Versions: All versions up to and including 19.2.3 Vendor: Altair Engineering, Inc C...

Fedora Update for wordpress FEDORA-2019-5cd3a50c8a

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for wavpack FEDORA-2019-8eeb8f9d3f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

procps: Local privilege escalation in top

If the HOME environment variable is unset or empty, top will read its configuration file from the current working directory without any security check. If a user runs top with HOME unset in an attacker-controlled directory, the attacker could achieve privilege escalation by exploiting one of...