SUSE SLED15 / SLES15 Security Update : perl-DBI (SUSE-SU-2020:3385-1)

This update for perl-DBI fixes the following issues : DBD::File drivers could open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. bsc1176492, CVE-2014-10401, CVE-2014-10402 Note that Tenable Network Security has extracted the preceding...

openSUSE Security Update : xen (openSUSE-2020-2192)

This update for xen fixes the following issues : - bsc1178963 - VUL-0: xen: stack corruption from XSA-346 change XSA-355 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

Security update for xorg-x11-server (important)

openSUSE Security Update: Security update for xorg-x11-server Announcement ID: openSUSE-SU-2020:2186-1 Rating: important References: 1174908 1177596 Cross-References: CVE-2020-14360 CVE-2020-25712 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available...

openSUSE Security Update : python-setuptools (openSUSE-2020-2143)

This update for python-setuptools fixes the following issues : - Fixed a directory traversal in downloadhttpurl bsc1176262 CVE-2019-20916 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

CVE-2020-28582

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents...

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information...

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server...

Information disclosure

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information...

CVE-2020-28582

This CVE-2020-28582 affects Trend Micro Apex One and OfficeScan XG SP1. The issue is an improper access control information disclosure in the web console (default port 4343) that allows unauthenticated remote attackers to connect to the product server and disclose the number of managed agents. Af...

CVE-2020-28583

The CVE-2020-28583 entry concerns Trend Micro Apex One and OfficeScan XG SP1 with an improper access control information disclosure. The connected documents explicitly describe that an unauthenticated attacker can connect to the product server and disclose version, build, and patch information vi...

CVE-2020-28582

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents...

CVE-2020-28583

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information...

CVE-2020-28576

An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information...

CVE-2020-28577

This CVE (CVE-2020-28577) affects Trend Micro Apex One and OfficeScan XG SP1. The connected advisory (ZDI-20-1376) describes an improper access control information disclosure allowing unauthenticated remote attackers to connect to the product server and disclose server hostname and database names...

CVE-2020-28576

CVE-2020-28576 affects Trend Micro Apex One and OfficeScan XG SP1, with an improper access control information disclosure . The issue allows an unauthenticated attacker to connect to the product server and disclose version/build information. Public details from ZDI describe exploitation via the w...

CVE-2020-28573

Trend Micro Apex One and OfficeScan XG SP1 are affected by an improper access control information disclosure vulnerability. An unauthenticated attacker can connect to the web console (listening on TCP port 4343 by default) and disclose the total number of agents managed by the server. The root ca...

openSUSE Security Update : slurm (openSUSE-2020-2033)

This update for slurm fixes the following issues : - CVE-2020-27745: PMIx - fix potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. This update was imported...

openSUSE Security Update : postgresql12 (openSUSE-2020-2029)

This update for postgresql12 fixes the following issues : - Upgrade to version 12.5 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

openSUSE Security Update : postgresql10 (openSUSE-2020-2019)

This update for postgresql10 fixes the following issues : - Upgrade to version 10.15 : - CVE-2020-25695, bsc1178666: Block DECLARE CURSOR ... WITH HOLD and firing of deferred triggers within index expressions and materialized view queries. - CVE-2020-25694, bsc1178667: a Fix usage of complex...

openSUSE Security Update : krb5 (openSUSE-2020-2062)

This update for krb5 fixes the following security issue : - CVE-2020-28196: Fixed an unbounded recursion via an ASN.1-encoded Kerberos message bsc1178512. This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package...