By michele654 on Tuesday, 27 September 2022
Category: Vulnerabilities

New Vulnerabilities Tuesday 27 September


New Alerts for Advantech, Veritas, NetApp, and Linux.

Advantech 

An SQL injection vulnerability in Advantech iView. An unauthenticated remote attacker bypass checks to perform SQL injection. For example, the attacker can exploit the vulnerability to retrieve the iView admin password. CVSSv3 score of 9.8
More info.

Veritas 

The NetBackup Primary server is vulnerable to Path traversal, DoS, and XXE injection attacks through the DiscoveryService service. CVSSv3 score of 5.3
More info.

The NetBackup Primary server is vulnerable to a SQL Injection attack affecting the NBFSMCLIENT service. CVSSv3 score of 9.0
More info.

NetApp 

SnapCenter shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that otherwise would be prevented. CVSSv3 score of 3.1
More info.

Linux 

SUSE has updated the kernel. More info.
OpenSUSE has updated the kernel. More info.
Ubuntu has updated the kernel. More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments