Fedora 38 : tang (2023-3e84bba241)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3e84bba241 advisory. Fixes CVE-2023-1672 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Missing slippage protection leads to potential sandwich of small transfers or blocking the swap feature

Lines of code Vulnerability details Impact The swap module is invoked with a default of coinswaptypes.InputCoin: transferredCoin, Address: recipient.String, coinswaptypes.OutputCoin: swapCoins, Address: recipient.String. The swap module makes sure that in tokens of the swap are limitted to...

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business switches allows attackers to execute cross-site scripting attacks.

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business switches is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks using a speciall...

Session fixation

Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session...

Atlas Copco Power Focus 6000

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Atlas Copco Equipment: Power Focus 6000 Vulnerabilities: Cleartext Storage of Sensitive Information, Small Space of Random Values, Cleartext Transmission of Sensitive Information 2. RISK EVALUATION...

CVE-2023-20188

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an authenticated, remote attacker to conduct a stored cross-site...

The Bold Plan to Create Cyber 311 Hotlines

UT-Austin will join a growing movement to launch cybersecurity clinics for cities and small businesses that often fall through the cracks...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows a hacker to execute arbitrary commands.

The vulnerability of the web interface for managing microprogrammed software routers from Cisco Small Business, models RV016, RV042, RV042G, RV082, RV320, and RV325, is related to insufficient validation of input data during HTTP packet processing. Exploiting this vulnerability allows a malicious...

CISA and Partners Release Joint Guide to Securing Remote Access Software

Today, CISA, Federal Bureau of Investigation FBI, the National Security Agency NSA, Multi-State Information Sharing and Analysis Center MS-ISAC, and the Israel National Cyber Directorate INCD released the Guide to Securing Remote Access Software. This new joint guide is the result of a...

[SECURITY] Fedora 38 Update: maradns-3.5.0036-1.fc38

MaraDNS is a package that implements the Domain Name Service DNS, an essential internet service. MaraDNS has the following advantages: Secure. Supported. Easy to use. Small. Open Source...

[SECURITY] Fedora 37 Update: maradns-3.5.0036-1.fc37

MaraDNS is a package that implements the Domain Name Service DNS, an essential internet service. MaraDNS has the following advantages: Secure. Supported. Easy to use. Small. Open Source...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to execute arbitrary code.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a perpetrator to trigger a service failure.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failure using specially...

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for Microprogramming Software on Cisco Small Business Series Switches is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially crafted request...

The vulnerability in the web interface for managing microprogramming software on Cisco Small Business Series switches allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface for managing microprogrammed software in Cisco Small Business Series switches is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Update now: 9 vulnerabilities impact Cisco Small Business Series

Vulnerabilities have been found and fixed in the web-based user interface of various Cisco products in the Small Business Series. These nine issues are tied to the web-based user interface of the products, and in a worst case scenario could lead to denial of service DoS conditions or arbitrary co...

The vulnerability of the web interface of the microprogramming software for Cisco Small Business Series switches allows a hacker to trigger a service failure.

The vulnerability of the web interface of Cisco Small Business Series Switches’ microprogramming software is related to the possibility of buffer overflow attacks based on a stack-based mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

GLSA-202305-25 : OWASP ModSecurity Core Rule Set: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-25 OWASP ModSecurity Core Rule Set: Multiple Vulnerabilities - OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname...

Cisco Small Business Denial of Service Vulnerability (CNVD-2023-40906)

Cisco Small Business is a switch from the American company Cisco Cisco. A denial of service vulnerability exists in Cisco Small Business Series Switches, which arises from a device authentication error on requests sent to the web interface, and can be exploited by an unauthenticated, remote...