February 27, 2020-KB4537572 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909

None None...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

Release Notes for Veeam ONE 9.5 Update 4a

Challenge Release Notes for Veeam ONE 9.5 Update 4a. Please confirm that you are running version 9.0 Update 1 build 9.0.0.2088 or later prior to installing this update. You can check this under Help | About in Veeam ONE console. After the successful upgrade, your build number will be 9.5.4.4587...

Nextcloud: Directory listing is enabled that exposes non public data through multiple path

Directory Listing is enabled on https://try.nextcloud.com and it shows out a few files on the server + The server version. POC: https://try.nextcloud.com/assets/ https://try.nextcloud.com/css/ https://try.nextcloud.com/js/ Impact This could leak sensitive information on the server and it also...

CVE-2019-9156

Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection...

SUSE-SU-2019:1381-1 Security update for rmt-server

This update for rmt-server to version 2.1.4 fixes the following issues: - Fix duplicate nginx location in rmt-server-pubcloud bsc1135222 - Mirror additional repos that were enabled during mirroring bsc1132690 - Make service IDs consistent across different RMT instances bsc1134428 - Make SMT data...

CVE-2019-4293

IBM Storwize V7000 Unified 2073 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699...

CVE-2019-4293

IBM Storwize V7000 Unified 2073 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699...

PT-2019-17017 · Ibm · Ibm Storwize V7000 Unified

Name of the Vulnerable Software and Affected Versions: IBM Storwize V7000 Unified 2073 version 1.6 Description: The issue allows an attacker to reveal the server version in a default installation, which could be used in further attacks against the system. Recommendations: For IBM Storwize V7000...

CVE-2019-4293: Undefined Security Weakness

IBM Storwize V7000 Unified 2073 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699...

CVE-2018-1999

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889...

CVE-2019-5748

In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks...

WordPress HpHospital 1.0 Database Disclosure

Exploit Title : WordPress HpHospital Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0...

Lynis 2.7.0 - Security Auditing Tool for Unix/Linux Systems

We are excited to announce this major release of auditing tool Lynis. Several big changes have been made to core functions of Lynis. These changes are the next of simplification improvements we made. There is a risk of breaking your existing configuration. Lynis is an open source security auditin...

New Privilege Escalation Flaw Affects Most Linux Distributions

An Indian security researcher has discovered a highly critical flaw in X.Org Server package that impacts OpenBSD and most Linux distributions, including Debian, Ubuntu, CentOS, Red Hat, and Fedora. Xorg X server is a popular open-source implementation of the X11 system display server that offers ...

Fuji Electric V-Server Integer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. An integer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

BOHEMIA INTERACTIVE a.s.: Apache Server Version Disclousure

Hello Team, I would like to report a bug for https://forums.bohemia.net/ Banner Grabbing is a technique used to get information about remote servers. In addition, this directory is used to find information about remote servers. Proof of concept : 1. Go to https://forums.bohemia.net/applications/...

Microsoft Windows PDF Remote Code Execution Vulnerability (CNVD-2018-17083)

Microsoft Windows 10 is a series of operating systems released by Microsoft.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server Version 1709 is a set of server operating systems.Windows PDF Library is one of the PDF libraries. Library is one of the PDF library...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2017-1743)

Summary WebSphere Application Server is shipped as a component of IBM Operations Analytics Predictive Insights. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin: A security vulnerability has been identified in WebSphere Application shipped with Tivoli Network Manager IP Edition (CVE-2017-1121)

Summary WebSphere Application Server is shipped as a component of Tivoli Network Manager IP Edition. Information about a security vulnerability affecting Tivoli Network Manager IP Edition has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Potenti...