MCERT

CVE-2020-17497

12th August 2020 - 19:37

eapol.c in iNet wireless daemon (IWD) through 1.8 allows attackers to trigger a PTK reinstallation by retransmitting EAPOL Msg4/4. Link: https://web.... Read more

CVE-2020-17505

12th August 2020 - 19:37

Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands ar... Read more

CVE-2020-17506

12th August 2020 - 19:37

Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injectio... Read more

CVE-2010-3159 (explzh)

12th August 2020 - 19:37

Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current... Read more

CVE-2010-4165 (linux_enterprise_desktop|_linux_enterprise_real_time_extension| linux_enterprise_server| linux_kernel| opensuse)

12th August 2020 - 19:37

The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values| which a... Read more