ManageEngine Applications Manager 14700 - Remote Code Execution (Authenticated)

!/usr/bin/python3 Exploit Title: ManageEngine Applications Manager 14700 - Remote Code Execution Authenticated Google Dork: None Date: 2020-09-04 Exploit Author: Hodorsec Vendor Homepage: https://manageengine.co.uk Vendor Vulnerability Description:...

HPSBHF03684 rev. 2 - Intel® BIOS September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel. VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in BIOS firmware for multiple Intel®...

Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 (KB4576489)

Security Only Update for .NET Framework 4.8 for Windows 8.1 and Windows Server 2012 R2 KB4576489 Applies to: Microsoft .NET Framework 4.8 Summary ClickOnce will no longer download applications from untrusted servers which use NTLM authentication, but, instead, will fail with “Authentication...

HPSBHF03685 rev. 2 - Intel® AMT and Intel® ISM September 2020 Security Updates

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in the Intel® Active Management Technology AMT and Intel® Standard Manageability I...

September 3, 2020—KB4571744 (OS Build 19041.488) Preview

None None...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity and...

OracleVM 3.4 : curl (OVMSA-2020-0035)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix TFTP small blocksize heap buffer overflow 462 - Security Fixes OraBug: 28939992 - CVE-2016-8615 cookie injection for other servers - CVE-2016-8616 case insensitive password comparison -...

Django 2.2.x < 2.2.16, 3.0.x < 3.0.10, 3.1.x < 3.1.1 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

OracleVM 3.4 : python (OVMSA-2020-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - Prefix dot in domain for proper subdomain validation C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0036...

Photon OS 2.0: Net PHSA-2020-2.0-0279

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140115;...

Photon OS 1.0: Net PHSA-2020-1.0-0318

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0318. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140113;...

Photon OS 2.0: Redis PHSA-2020-2.0-0278

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0278. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140122...

Photon OS 2.0: Bindutils PHSA-2020-2.0-0279

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CentOS 7 : firefox (RHSA-2020:3556)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3556 advisory. - By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object whi...

Photon OS 2.0: Ntp PHSA-2020-2.0-0279

An update of the ntp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140116;...

olcne conmon coredns cri-o cri-tools etcd flannel grafana helm istio kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard prometheus yq security update

olcne 1.1.5-2 - kubernetes pod subnet flag not honored in flannel configuration 1.1.5-1 - Address CVE-2020-16845 conmon 2.0.10-3 - Address CVE-2020-16845 coredns 1.6.5-1.0.3 - Address CVE-2020-16845 cri-o 1.17.0-1.0.5 - Address CVE-2020-16845 cri-tools 1.17.0-1.0.2 - Address CVE-2020-16845...

OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0039...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200826)

Security Fixes : - kernel: NULL pointer dereference in searchkeyring CVE-2017-2647 - kernel: heap-based buffer overflow in lbsibssjoinexisting function in drivers/net/wireless/marvell/libertas/cfg.c CVE-2019-14896 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Fedora 32 : 32:bind / bind-dyndb-ldap / dnsperf (2020-a02b7a0f21)

Upstream release notes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity and...