CVE-2018-17768

Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17765

CVE-2018-17765 affects Ingenico Telium 2 POS terminals where TRACE protocol commands were undeclared. Multiple connected sources confirm the issue lies in Telium 2 software prior to the Telium 2 SDK v9.32.03 patch N. The remediation is to upgrade to Telium 2 SDK v9.32.03 patch N (or later) to res...

CVE-2018-17765

Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N...

PT-2020-8626

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue allows for arbitrary code execution via the TRACE protocol. Recommendations: For versions prior to Telium 2 SDK v9.32.03 patch N, update to...

CVE-2018-17772: Undefined Security Weakness

Ingenico Telium 2 POS terminals allow arbitrary code execution via the TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17768: Undefined Security Weakness

Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...

CVE-2018-17765: Undefined Security Weakness

Ingenico Telium 2 POS terminals have undeclared TRACE protocol commands. This is fixed in Telium 2 SDK v9.32.03 patch N...

PT-2020-8619 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns undeclared TRACE protocol commands in Ingenico Telium 2 POS terminals. This problem is resolved in Telium 2 SDK v9.32.03 patch N...

PT-2020-8622 · Ingenico · Ingenico Telium 2

Name of the Vulnerable Software and Affected Versions: Ingenico Telium 2 POS terminals versions prior to Telium 2 SDK v9.32.03 patch N Description: The issue concerns an insecure TRACE protocol in Ingenico Telium 2 POS terminals. This problem is resolved in Telium 2 SDK v9.32.03 patch N...

Command Injection in traceroute

All versions of traceroute are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The trace function is vulnerable and can be abused if the host value is controlled by an...

GHSA-RJVJ-673Q-4HFW Command Injection in traceroute

All versions of traceroute are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The trace function is vulnerable and can be abused if the host value is controlled by an...

PT-2020-21492

Name of the Vulnerable Software and Affected Versions traceroute versions affected versions not specified Description The issue concerns a command injection problem where input is not properly sanitized and is passed directly to an exec call, potentially allowing attackers to execute arbitrary...

Security update for apache2 (moderate)

openSUSE Security Update: Security update for apache2 Announcement ID: openSUSE-SU-2020:1285-1 Rating: moderate References: 1174052 1175070 1175071 1175074 Cross-References: CVE-2020-11984 CVE-2020-11993 CVE-2020-9490 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabiliti...

Open-Xchange: Buffer overread off by one in `rpa_read_buffer`, incomplete fix for CVE-2020-12674

In function rpareadbuffer, the condition in if p end return 0; len = p++; is not strict enough It should be if p = end return 0; len = p++; The fix from https://github.com/dovecot/core/commit/69ad3c902ea4bbf9f21ab1857d8923f975dc6145 is not enough The ASAN stack trace is...

Wireshark: Denial of service

Background Wireshark is a network protocol analyzer formerly known as ethereal. Description A double free error was discovered in Wireshark’s Kafka dissector. Impact A remote attacker could exploit these vulnerabilities by sending a malformed packet or enticing a user to read a malformed packet...

CVE-2020-6310

Improper access control in SOA Configuration Trace component in SAP NetWeaver ABAP Server and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure...

Improper access control

Improper access control in SOA Configuration Trace component in SAP NetWeaver ABAP Server and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure...

CVE-2020-6310

CVE-2020-6310 affects SAP NetWeaver (ABAP Server) and ABAP Platform versions 702, 730, 731, 740, 750. The issue is improper access control in the SOA Configuration Trace component, enabling any authenticated user to enumerate SAP users, resulting in information disclosure. Connected sources corro...

PT-2020-5169 · Sap · Sap Netweaver +2

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP Server and ABAP Platform versions 702, 730, 731, 740, 750 Description: The issue is related to improper access control in the SOA Configuration Trace component, allowing any authenticated user to enumerate all SAP users. Th...

CVE-2020-6310: Undefined Security Weakness

Improper access control in SOA Configuration Trace component in SAP NetWeaver ABAP Server and ABAP Platform, versions - 702, 730, 731, 740, 750, allows any authenticated user to enumerate all SAP users, leading to Information Disclosure...