Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4606)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker ...

IBM Verify Gateway (IVG) Sensitive Information Plaintext Storage Vulnerability

IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. A security vulnerability exists in IBM Verify Gateway IVG versions 1.0.0 and 1.0.1, which stems from a program that allows sensitive information to be transmitted in clear text. An attacker could exploi...

Important Announcement

ATTENTION: Your vulnerability tests are out of maintenance and not updated since July 1st 2020. Your setup of Greenbone Source Edition will not report about any new threats in your scanned environment since this date! REASON: Your Greenbone setup is connected to a discontinued download protocol o...

Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-42261)

Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A privileged license and access control issue vulnerability exists in Cisco SD-WAN Solution, which stems from a user using a default static password. A local attacker could exploit this vulnerability to log in to an account...

Default credentials

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a...

CVE-2020-3180

Cisco SD-WAN Solution Software is affected by a vulnerability due to an account with a default, static password. An unauthenticated, local attacker could exploit this to log in with root privileges, potentially compromising the device. The issue stems from a hardcoded/default credential scenario ...

Cisco SD-WAN Solution Software Denial of Service Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit...

PT-2020-3116 · Cisco · Cisco Sd-Wan Solution

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Solution Software affected versions not specified Description: The issue is related to the use of hardcoded credentials in the Cisco SD-WAN solution. An unauthenticated, local attacker could access an affected device by using an...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4484463)

This host is missing an important security update according to Microsoft KB4484463. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian: Security Advisory (DSA-4722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Introducing Imperva Cloud Data Security

We are excited to announce that our latest data security innovation is now available worldwide! Made for the cloud, Imperva Cloud Data Security CDS builds on our industry-leading application and data security solutions, providing an industry-first, complete cloud data SaaS security solution that...

F5 Networks BIG-IP : FRF.16 parser vulnerability (K04367730)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.3.1 / 15.1.3 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K04367730 advisory. The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-...

[SECURITY] [DSA 4720-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4720-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 08, 2020 https://www.debian.org/security/faq -...

ConnectWise Automate SQL Injection Vulnerability

ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in Connectwise Automate versions prior to 2020.7 and prior to 2019.12...

Is 97% Network Traffic Offload Interesting?

Sports, gaming, and other live events have the potential to overwhelm network capacity due to the sheer volume of traffic generated when large numbers of viewers or gamers engage. These "peak" events may only occur once a month or even once a year sports championships, election results, gaming...

WordPress CarrerUp premium theme <= 2.3.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarrerUp premium theme versions = 2.3.0. Solution Update the WordPress CarrerUp premium theme to the latest available version at least 2.3.1...

SAP Solution Manager Injection Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

CVE-2020-6261

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...

Input validation

SAP Solution Manager Trace Analysis, version 7.20, allows an attacker to perform a log injection into the trace file, due to Incomplete XML Validation. The readability of the trace file is impaired...