16217 matches found
Huawei EulerOS: Security Advisory for cvs (EulerOS-SA-2020-2280)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-16259
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...
Design/Logic Flaw
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...
CVE-2020-16259
Affected product: Winston 1.5.4 devices. Issue: an SSH user account is accessible from bastion hosts, described as undocumented and not announced to users. This root cause enables full compromises of confidentiality, integrity, and availability per CVSS 3.1/5.0? (from the CVE data: attacker could...
CVE-2020-16259
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...
CVE-2019-8901
This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action...
Design/Logic Flaw
This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action...
CVE-2019-8901
This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action...
CVE-2019-8901
CVE-2019-8901 affects iOS/iPadOS via the Shortcuts “Run script over SSH” flow. The root cause is improper host-key verification when connecting to a previously known SSH server, enabling an attacker in a privileged network position to intercept SSH traffic. Apple fixes are in iOS 13.1 and iPadOS ...
Huawei GaussDB Kernel Detection (Linux/Unix SSH Login)
SSH login-based detection of Huawei GaussDB Kernel. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Huawei GaussDB Kernel Detection Consolidation
Consolidation of Huawei GaussDB Kernel detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Adtec Digital Products Hardcoded Credentials / Remote Root
Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Date: 2020-07-24 Exploit Author: LiquidWorm Software Link: https://www.adtecdigital.com / https://www.adtecdigital.com/support/documents-downloads Version: Multiple Adtec Digital Multiple Products - Default...
Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Vulnerability
Exploit Title: Adtec Digital Multiple Products - Default Hardcoded Credentials Remote Root Date: 2020-07-24 Exploit Author: LiquidWorm Software Link: https://www.adtecdigital.com / https://www.adtecdigital.com/support/documents-downloads Version: Multiple Adtec Digital Multiple Products - Default...
Huawei openGauss Detection (Linux/Unix SSH Login)
SSH login-based detection of Huawei openGauss. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Juniper Junos SNMP DoS (JSA11080)
According to the self reported version of Junos OS on the remote device, the device is vulnerable to a denial of service vulnerability due to a memory leak. An unauthenticated, remote attacker can exploit this, by sending multiple of a specific SNMP OID poll, to consume increasing amounts of...
CVE-2020-14818
Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...
CVE-2020-14818
CVE-2020-14818 targets Oracle Solaris 11, specifically the Utility component. The issue is a vulnerability in Solaris 11 allowing a low-privileged attacker who can reach the system over SSH on the network to compromise Oracle Solaris. Attacks require user interaction, and while the flaw exists in...
CVE-2020-14818
Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...
CVE-2020-14818
Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with network access via SSH to compromise Oracle Solaris. Successful attacks require human interaction...
Scientific Linux Security Update : cloud-init on SL7.x x86_64 (20201001)
Security Fixes : - cloud-init: Use of random.choice when generating random password CVE-2020-8631 - cloud-init: Too short random password length in ccsetpassword in config/ccsetpasswords.py CVE-2020-8632 - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 C Tenab...