Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

CVE-2019-20729

CVE-2019-20729 affects several NETGEAR router models (e.g., JNDR3000, R6250, R6300v2, R6400/r6400v2, R6700, R6900, R7000, R6900P/R7000P, R7300DST, R7900/R8000, R7900P/R8000P, R8300, R8500, WNDR3400v3, WNDR4500v2, WNR3500Lv2 and others) with an issue described as incorrect configuration of securit...

CVE-2019-20693

NETGEAR WAC505 and WAC510 wireless access points are affected by a misconfiguration of security settings, applicable to WAC505/WAC510 firmware prior to 8.0.6.4. Root cause: security settings misconfiguration. Impact per cited metrics: confidentiality and integrity are LOW; availability not affect...

CVE-2019-20693: Incorrect Permission Assignment for Critical Resource

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

PT-2020-10704

Name of the Vulnerable Software and Affected Versions JNDR3000 versions 1.0.0.0 through 1.0.0.21 R6250 versions 1.0.0.0 through 1.0.4.25 R6300v2 versions 1.0.0.0 through 1.0.4.21 R6400 versions 1.0.0.0 through 1.0.1.35 R6400v2 versions 1.0.0.0 through 1.0.2.51 R6700 versions 1.0.0.0 through...

CVE-2019-20654

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4...

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

Design/Logic Flaw

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

CVE-2019-20648

NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings...

PT-2020-10623

Name of the Vulnerable Software and Affected Versions NETGEAR RN42400 versions prior to 6.10.2 Description The issue is related to the incorrect configuration of security settings. Recommendations For versions prior to 6.10.2, update to version 6.10.2 or later to resolve the issue...

PT-2020-10629

Name of the Vulnerable Software and Affected Versions NETGEAR WAC505 versions prior to 8.0.6.4 NETGEAR WAC510 versions prior to 8.0.6.4 Description The issue is related to the incorrect configuration of security settings in certain NETGEAR devices. Recommendations For NETGEAR WAC505 versions prio...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30406)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by attackers to modify security settings without authentication...

CVE-2014-2225

Multiple cross-site request forgery CSRF vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators for requests that 1 create a new admin user via a request to api/add/admin; 2 have unspecified impact via a request to...

Open-Xchange: XSS - Guard - Insufficient escaping of User-IDs from PGP Keys

Vulnerability PGP user IDs are typically in form of name and OX Guard properly escapes angle brackets when inserting them to HTML. But in the code for displaying a list of keys it inserts IDs into HTML attributes without escaping double quote characters. javascript //...

CVE-2019-9853

LibreOffice documents can contain macros. The execution of those macros is controlled by the document security settings, typically execution of macros are blocked by default. A URL decoding flaw existed in how the urls to the macros within the document were processed and categorized, resulting in...

SUSE SLED15 / SLES15 Security Update : LibreOffice (SUSE-SU-2020:0121-1)

This update libreoffice to version 6.3.3 fixes the following issues : LibreOffice was updated to 6.3.3 jscSLE-8705, bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed : CVE-2019-9853: Fixed an...

How to change the default lifetime of Compositing Engine packaging machine in ELM

By default, if finalization has not begun in 3 days of time since the Packaging Machine was created, the task will be canceled with a timeout error. On the ELM logs, you may see something like the below: 2020-01-02 13:43:59,486 ERROR 61605 CompositingEngineP: Timeout occured after...

openSUSE: Security Advisory for LibreOffice (openSUSE-SU-2019:2709-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-9812

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the...