Ubuntu: Security Advisory (USN-4633-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4633-1 postgresql-10, postgresql-12, postgresql-9.5 vulnerabilities

Peter Eisentraut discovered that PostgreSQL incorrectly handled connection security settings. Client applications could possibly be connecting with certain security parameters dropped, contrary to expectations. CVE-2020-25694 Etienne Stalmans discovered that PostgreSQL incorrectly handled the...

Vulnerability in client (CVE-2020-25694)

Reconnection can downgrade connection security settings Many PostgreSQL-provided client applications have options that create additional database connections. Some of those applications reuse only the basic connection parameters e.g. host, user, port, dropping others. If this drops a...

PT-2020-4684 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to...

PT-2020-4685 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in security settings of the Windows Hyper-V service, which can be exploited by a remote attacker to cause a denial of service by sending specially...

CVE-2020-26930

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

CVE-2020-26930

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

CVE-2020-26916

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before 1.0.1.24, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 befor...

CVE-2020-26898

NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...

Design/Logic Flaw

NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...

Design/Logic Flaw

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

CVE-2020-26916

CVE-2020-26916 concerns NETGEAR router devices affected by incorrect security settings configuration. The connected data lists affected models and firmware ranges, for example: D6200 (< 1.1.00.38), D7000 (< 1.0.1.78), JR6150 (< 1.0.1.24), R6020 (< 1.0.0.42), R6050 (< 1.0.1.24), R60...

CVE-2020-26930

NETGEAR EX7700 devices before firmware 1.0.0.210 are affected by an incorrect configuration of security settings. The connected documents do not provide further technical details (root cause, exploitability, or concrete fixes). No explicit remediation or exploitation status is described in the su...

CVE-2020-26930

NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings...

PT-2020-16540

Name of the Vulnerable Software and Affected Versions NETGEAR RAX40 versions prior to 1.0.3.80 Description The issue is related to the incorrect configuration of security settings. Recommendations For versions prior to 1.0.3.80, update to version 1.0.3.80 or later to resolve the issue...

CVE-2020-26898: Undefined Security Weakness

NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

Code injection

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...

CVE-2020-25281

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software. Applications with sensitive security settings such as the package verifier application mishandle unknown-source installations. The LG ID is LVE-SMP-190002 September 2020...