backports_sle Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/backports_sle/ Sun, 26 Feb 2023 06:43:15 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png backports_sle Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/backports_sle/ 32 32 CVE-2020-8026 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8026/ Sun, 26 Feb 2023 06:43:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8026/ A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE […]

The post CVE-2020-8026 appeared first on CVE Vulnerability.

]]> A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new user to escalate their privileges to root. This issue affects: openSUSE Leap 15.2 inn version 2.6.2-lp152.1.26 and prior versions. openSUSE Tumbleweed inn version 2.6.2-4.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.3.3.1 and prior versions.

The post CVE-2020-8026 appeared first on CVE Vulnerability.

]]> CVE-2020-7106 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7106/ Sun, 26 Feb 2023 06:42:57 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7106/ Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).

The post CVE-2020-7106 appeared first on CVE Vulnerability.

]]> Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the description parameter in data_sources.php (a raw string from the database that is displayed by $header to trigger the XSS).

The post CVE-2020-7106 appeared first on CVE Vulnerability.

]]> CVE-2020-7043 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7043/ Sun, 26 Feb 2023 06:42:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7043/ An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider ” characters, as demonstrated by a good.example.comx00evil.example.com attack.

The post CVE-2020-7043 appeared first on CVE Vulnerability.

]]> An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider ” characters, as demonstrated by a good.example.comx00evil.example.com attack.

The post CVE-2020-7043 appeared first on CVE Vulnerability.

]]> CVE-2020-7042 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7042/ Sun, 26 Feb 2023 06:42:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7042/ An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).

The post CVE-2020-7042 appeared first on CVE Vulnerability.

]]> An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted (only a malformed certificate may be accepted).

The post CVE-2020-7042 appeared first on CVE Vulnerability.

]]> CVE-2020-7041 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7041/ Sun, 26 Feb 2023 06:42:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7041/ An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.

The post CVE-2020-7041 appeared first on CVE Vulnerability.

]]> An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a successful return value.

The post CVE-2020-7041 appeared first on CVE Vulnerability.

]]> CVE-2020-7040 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7040/ Sun, 26 Feb 2023 06:42:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7040/ storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

The post CVE-2020-7040 appeared first on CVE Vulnerability.

]]> storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

The post CVE-2020-7040 appeared first on CVE Vulnerability.

]]> CVE-2020-6562 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6562/ Sun, 26 Feb 2023 06:42:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6562/ Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

The post CVE-2020-6562 appeared first on CVE Vulnerability.

]]> Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

The post CVE-2020-6562 appeared first on CVE Vulnerability.

]]> CVE-2020-6564 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6564/ Sun, 26 Feb 2023 06:42:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6564/ Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.

The post CVE-2020-6564 appeared first on CVE Vulnerability.

]]> Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page.

The post CVE-2020-6564 appeared first on CVE Vulnerability.

]]> CVE-2020-6569 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6569/ Sun, 26 Feb 2023 06:42:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6569/ Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

The post CVE-2020-6569 appeared first on CVE Vulnerability.

]]> Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

The post CVE-2020-6569 appeared first on CVE Vulnerability.

]]> CVE-2020-6570 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6570/ Sun, 26 Feb 2023 06:42:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6570/ Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.

The post CVE-2020-6570 appeared first on CVE Vulnerability.

]]> Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted WebRTC interaction.

The post CVE-2020-6570 appeared first on CVE Vulnerability.

]]>