Path traversal

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server...

CVE-2018-2467

SAP BusinessObjects BI Platform Servers SDK (versions 4.1 and 4.2) is affected by an information-disclosure vulnerability where a specially crafted URL in a web browser can cause the server to return the path to the application server. The issue appears tied to the Software Development Kit compon...

[SECURITY] Fedora 28 Update: clamav-0.100.2-2.fc28

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

PT-2018-2087

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description The issue is related to errors in acce...

PT-2018-2118

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description The issue is related to errors in the memory object storage mechanisms of the DirectX Graph...

PT-2018-2079

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A remote code execution issue exists due to improper handling of URIs by the Windows Shell, allowing remote attackers to execute arbitrary code. This can be achieved through a...

PT-2018-2080

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers Description The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary code with elevated privileges using a specially crafted application...

PT-2018-15583

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform Servers versions 4.1 through 4.2 Description The issue arises in the Software Development Kit of the SAP BusinessObjects BI Platform Servers. By using a specially crafted URL in a web browser, such as Chrome, th...

PT-2018-2077

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers Description The issue is related to a security feature bypass in the Device Guard component of the Windows operating system, which is caused by errors in security settings...

CVE-2018-2467: Undefined Security Weakness

In the Software Development Kit in SAP BusinessObjects BI Platform Servers, versions 4.1 and 4.2, using the specially crafted URL in a Web Browser such as Chrome the system returns an error with the path of the used application server...

CVE-2016-7475

Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel TMM may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles...

[SECURITY] Fedora 28 Update: mediawiki-1.29.3-1.fc28

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

Authentication flaw

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2013-7465

CVE-2013-7465 affects Ice Cold Apps Servers Ultimate 6.0.2(12), where no authentication is required for TELNET, SSH, or FTP, enabling remote attackers to upload PHP scripts and execute arbitrary code. The issue is documented with high CVSS scores (e.g., CVSS v2 base 7.5; CVSS v3 base 9.8) indicat...

PT-2018-4115

Name of the Vulnerable Software and Affected Versions Ice Cold Apps Servers Ultimate version 6.0.212 Description The issue allows remote attackers to execute arbitrary code by uploading PHP scripts due to a lack of authentication requirement for TELNET, SSH, or FTP. Recommendations For version...

CVE-2013-7465: Improper Authentication

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric—Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200—allows attackers to select passwords.

The vulnerability of FTP servers of microprogrammed logic controllers from Schneider Electric, such as Modicon Premium, Modicon Quantum, Modicon M340, and BMXNOR0200, is related to errors in the implementation of cryptographic algorithms. Exploiting this vulnerability can allow an attacker to...

Why Supply Chain Hacks Are a Cybersecurity Worse Case Scenario

A blockbuster report from Bloomberg says that China has compromised servers used by major US companies. It's a problem that experts have long feared, and still don't know how to resolve...