Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities.
4bae25bd4e01037d36d2f2cbd5b1b24bUbuntu Security Notice 4454-2 - USN-4454-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. Various other issues were also addressed.
28286858828b581194abde5675e0a025Ubuntu Security Notice 4455-1 - It was discovered that NSS incorrectly handled certain signatures. An attacker could possibly use this issue to expose sensitive information.
2f3a49b001cc039e26024aa57b1ee4adRed Hat Security Advisory 2020-3387-01 - IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to version 7R1 SR4-FP70. Issues addressed include bypass and information leakage vulnerabilities.
e0690190a36f7705b60c7f221e2e4c0dRed Hat Security Advisory 2020-3388-01 - IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 7 to version 7R1 SR4-FP70. Issues addressed include bypass and information leakage vulnerabilities.
53ee4b1289ef46a3e9115422b79ee9b8Ubuntu Security Notice 4454-1 - Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
4d727511174b362f017cea4d57f55db7ManageEngine ADSelfService Plus 6000 unauthenticated remote code execution exploit.
0261c2ef1439e755fd4c0111baa4b914Two denial of service exploits for Cisco 7937G versions SIP-1-4-5-7 and below.
5534c1f0e1f875aee45b3734baba6fdbCisco 7947G versions SIP-1-4-5-7 and below privilege escalation exploit.
50b203b494ce1d079936d6dbb4a3f309This exploit is an all-in-one tool that leverages vulnerabilities described in CVE-2020-16139, CVE-2020-16138, and CVE-2020-16137 against Cisco 7937G devices versions SIP-1-4-5-7 and below.
9eb60ef20d0f3abf883446a0c58b2d27Red Hat Security Advisory 2020-3386-01 - IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE 8 to version 8 SR6-FP15. Issues addressed include bypass and information leakage vulnerabilities.
748ef1c02992345186a50a4c59e10551Warehouse Inventory System version 1.0 suffers from a cross site request forgery vulnerability.
01290f1430fc0c874d2441c5bbeb39f0Tailor MS version 1.0 reflected cross site scripting key logger exploit.
e7c6a76445ffac2108a614abbaec5d98BarracudaDrive version 6.5 suffers from a privilege escalation vulnerability.
46d297f212c73f78372745c92dba3e78House Rental version 1.0 SQL injection exploit that changes the administrative password. Written in python.
4835e335cf4e574990008b7767ccd72aBarcodeOCR version 19.3.6 suffers from an unquoted service path vulnerability.
76a9817e49286288920ad38918c7e016Red Hat Security Advisory 2020-3385-01 - LibVNCServer is a C library that enables you to implement VNC server functionality into own programs. Issues addressed include a buffer overflow vulnerability.
81cd0220bba70e36f109ac88fbf015ebRed Hat Security Advisory 2020-3383-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This asynchronous patch is an update for JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 5, 6, and 7. All users of Red Hat JBoss Enterprise Application Platform 6.4 are advised to upgrade to this updated package. Issues addressed include a denial of service vulnerability.
f6410d721cabef50d5751dc75362582dRed Hat Security Advisory 2020-3382-01 - Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This asynchronous patch is an update for JBoss Enterprise Application Platform 6.4. All users of Red Hat JBoss Enterprise Application Platform 6.4 are advised to upgrade to these updated packages. Issues addressed include a denial of service vulnerability.
814ef709bbaa551c16356286466e716fRed Hat Security Advisory 2020-3379-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
f91b3df8a8eebc8205c3ba022fe3d087Red Hat Security Advisory 2020-3378-01 - The Berkeley Internet Name Domain is an implementation of the Domain Name System protocols. BIND includes a DNS server ; a resolver library ; and tools for verifying that the DNS server is operating correctly.
7ae0d56c5d06f5ca004ef35ff8a86769Red Hat Security Advisory 2020-3377-01 - Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 84.0.4147.105. Issues addressed include buffer overflow, bypass, information leakage, out of bounds write, and use-after-free vulnerabilities.
d4c0284575f2d5389a7e6a4a90b74ae4Gentoo Linux Security Advisory 202008-5 - A buffer overflow in gThumb might allow remote attacker(s) to execute arbitrary code. Versions less than 3.10.0 are affected.
6079dfd95b3c1cbab40ba699c0ff8af7Gentoo Linux Security Advisory 202008-6 - A use-after-free was found in iproute2, possibly allowing a Denial of Service condition. Versions less than 5.1.0 are affected.
dd397a209e25d63bacec44e770ef754fGentoo Linux Security Advisory 202008-4 - Multiple vulnerabilities have been found in Apache, the worst of which could result in the arbitrary execution of code. Versions less than 2.4.46 are affected.
6ebbbe914e5e8bb0a77e0de98171b948
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed