HomeAutomation v3.3.2 Open Redirect

Summary HomeAutomation is an open-source web interface and scheduling solution. It was initially made for use with the Telldus TellStick, but is now based on a plugin system and except for Tellstick it also comes with support for Crestron, OWFS and Z-Wave using OpenZWave. It controls your devices...

SQL Injection Vulnerability in Education Industry Digitization Solution of Beijing Kuangyi Technology Co.

Beijing Kuangxiang Technology Co., Ltd. digital solution for the education industry is a full-stack artificial intelligence solution for schools and kindergartens. A SQL injection vulnerability exists in the Education Industry Digital Solution of Beijing Kuangyi Technology Co. Ltd, which can be...

F5 BIG-IP and F5 BIG-IQ Centralized Management Information Disclosure Vulnerability

F5 BIG-IP and F5 BIG-IQ Centralized Management are both products of F5 Corporation in the U.S. F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a suite of...

Security Bulletin: Cross frame scripting vulnerability in Connect:Enterprise HTTP (CVE-2013-6327)

Summary IBM Sterling Connect:Enterprise HTTP Option is vulnerable to cross frame scripting attacks. Vulnerability Details CVE ID: CVE-2013-6327 DESCRIPTION: IBM Sterling Connect:Enterprise HTTP Option could allow a cross-frame scripting attack, caused by improper validation of input within a fram...

Cloud Transformation – 2020 Trend #1

The Imperva team is closing out 2019 with a series on the cybersecurity trends we predict will shape the landscape in 2020. Last week, Imperva CTO Kunal Anand mined insights from our global customer base and our research team, Imperva Research Labs, to come up with his top five list of...

Debian DSA-4583-1 : spip - security update

A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution stretch is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...

Exploit for Unrestricted Upload of File with Dangerous Type in Verot_Project Verot

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file uplo...

Unspecified vulnerability in SAP Treasury and Risk Management

SAP Treasury and Risk Management TRM is a finance and risk management solution from SAP. The product is primarily used to analyze and optimize business processes in the area of corporate finance. A security vulnerability exists in SAP TRM, which stems from a lack of authorization checks in the...

SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:3090-1)

This update for ucode-intel fixes the following issues : Updated to 20191115 official security release bsc1157004 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it a...

How to Reset Password in Veeam Backup for AWS

Related User Guide Page Veeam Backup for AWS User Guide: Accessing Web UI from Workstation Challenge You may need to reset a password in Veeam Backup for AWS. Solution Make sure that the machine you are using for troubleshooting is in the list of allowed IP addresses in the Security Groups of you...

Fedora Update for mingw-freeimage FEDORA-2019-76f546b7b8

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important: Red Hat Security Advisory: qemu-kvm-ma security update

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2019-16002: Cross-Site Request Forgery (CSRF)

A vulnerability in the vManage web-based UI web UI of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web UI on an affected instan...

Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities I. VULNERABILITY...

iasparliament.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1020144 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

PT-2019-4238

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution vManage affected versions not specified Description The issue is related to a cross-site request forgery CSRF attack in the vManage web-based UI of the Cisco SD-WAN Solution. This attack could allow an unauthenticated,...

Security Bulletin: GNU C library (glibc) vulnerability affects IBM WebSphere Cast Iron Solution (CVE-2015-1781)

Summary Open source GNU C library glibc vulnerability affects IBM WebSphere Cast Iron Solution. Vulnerability Details CVEID: CVE-2015-1781 DESCRIPTION: GNU C Library glibc is vulnerable to a buffer overflow, caused by improper bounds checking by the gethostbynamer and other related functions. By...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities (CVE-2016-8735, CVE-2016-6816)

Summary There are vulnerabilities CVE-2016-8735, CVE-2016-6816 reported in Apache Tomcat v6 that is used by WebSphere Cast Iron Solution. WebSphere Cast Iron has remediated the affected versions. Vulnerability Details CVEID: CVE-2016-8735 DESCRIPTION: Apache Tomcat could allow a remote attacker t...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by Apache Tomcat vulnerabilities

Summary There are vulnerabilities reported in Apache Tomcat v6 that is used by WebSphere Cast Iron Solution. WebSphere Cast Iron Solution has remediated the affected versions. Vulnerability Details CVEID: CVE-2016-0762 DESCRIPTION: Apache Tomcat could allow a remote attacker to obtain sensitive...

Security Bulletin: IBM WebSphere Cast Iron Solution is affected by an OpenSSL vulnerability (CVE-2017-3731)

Summary IBM WebSphere Cast Iron Solution has addressed the following vulnerability in OpenSSL. Vulnerability Details CVEID: CVE-2017-3731 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an out-of-bounds read when using a specific cipher. By sending specially crafted truncated...