PT-2020-3564

Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions prior to 5.11.7.0 Description A high severity out of band OS command injection issue exists, allowing an authenticated attacker to execute arbitrary commands on the CloudForms server while setting up a conversion ho...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-1809)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : ark -- directory traversal (d1ef1138-d273-11ea-a757-e0d55e2a8bf9)

KDE Project Security Advisory reports : KDE Project Security AdvisoryTitle:Ark: maliciously crafted archive can install files outside the extraction directory.Risk Rating:ImportantCVE:CVE-2020-16116Versions:ark Date:30 July 2020Overview A maliciously crafted archive with '../' in the file paths...

CVE-2020-3375: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted traffic to an affected...

mail.affinity-solution.com Cross Site Scripting vulnerability OBB-1242581

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Cloud workload security: Should you worry about it?

Due to the increasing use of the cloud, organizations find themselves dealing with hybrid environments and nebulous workloads to secure. Containerization and cloud-stored data have provided the industry with a new challenge. And while you can try to make the provider of cloud data storage...

Cherokee Web Server 0.4.27 <= 1.2.104 DoS Vulnerability

Cherokee Web Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2020-3470

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution Software affected versions not specified Description A buffer overflow issue in Cisco SD-WAN Solution Software is caused by insufficient input validation, allowing an unauthenticated, remote attacker to send crafted traff...

FFmpeg: Multiple vulnerabilities

Background FFmpeg is a complete, cross-platform solution to record, convert and stream audio and video. Description Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4606)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker ...

IBM Verify Gateway (IVG) Sensitive Information Plaintext Storage Vulnerability

IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. A security vulnerability exists in IBM Verify Gateway IVG versions 1.0.0 and 1.0.1, which stems from a program that allows sensitive information to be transmitted in clear text. An attacker could exploi...

Important Announcement

ATTENTION: Your vulnerability tests are out of maintenance and not updated since July 1st 2020. Your setup of Greenbone Source Edition will not report about any new threats in your scanned environment since this date! REASON: Your Greenbone setup is connected to a discontinued download protocol o...

Cisco SD-WAN Solution Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-42261)

Cisco SD-WAN Solution is a set of network extension solutions from Cisco. A privileged license and access control issue vulnerability exists in Cisco SD-WAN Solution, which stems from a user using a default static password. A local attacker could exploit this vulnerability to log in to an account...

Default credentials

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a...

CVE-2020-3180

Cisco SD-WAN Solution Software is affected by a vulnerability due to an account with a default, static password. An unauthenticated, local attacker could exploit this to log in with root privileges, potentially compromising the device. The issue stems from a hardcoded/default credential scenario ...

CVE-2020-3379: Improper Input Validation

A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted...

CVE-2020-3180: Insufficiently Protected Credentials

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a...

CVE-2020-3351: Uncontrolled Resource Consumption

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit...

Cisco SD-WAN Solution Software Denial of Service Vulnerability

A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An attacker could exploit...

Microsoft Project 2010 Remote Code Execution Vulnerability (KB4484463)

This host is missing an important security update according to Microsoft KB4484463. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...