CVE-2021-1355

Cisco Unified Communications Manager IM&P is affected by multiple vulnerabilities enabling path traversal and SQL injection. The SQL injection issue also affects Unified CM and Unified CM SME. Root cause involves input handling flaws in affected components. Impact is partial confidentiality loss ...

CVE-2021-1357

CVE-2021-1357 concerns multiple input-validation weaknesses in Cisco Unified Communications Manager IM&P, with a broader impact affecting Unified CM and Unified CM SME. The advisory describes path-traversal and SQL injection vulnerabilities in Unified CM IM&P, which may allow an attacker to acces...

CVE-2021-1357 Cisco Unified Communications Products Vulnerabilities

Multiple vulnerabilities in Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&P also affects Cisc...

FreeBSD : go -- cmd/go: packages using cgo can cause arbitrary code execution at build time; crypto/elliptic: incorrect operations on the P-224 curve (6a4805d5-5aaf-11eb-a21d-79f5bc5ef6a9)

The Go project reports : The go command may execute arbitrary code at build time when cgo is in use on Windows. This may occur when running 'go get', or any other command that builds code. Only users who build untrusted code and don't execute it are affected. In addition to Windows users, this ca...

Security Bulletin: NVIDIA SHIELD TV - January 2021

NVIDIA has released a software security update for NVIDIA SHIELD® TV. This update addresses issues that may lead to denial of service, escalation of privileges, or data loss. To protect your system, download and install this software update through the update notification that will appear on the...

Denial of Service Vulnerability in TL-ER6110G of P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in the TL-ER6110G, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-ER5520G of P&L Technologies Ltd.

The TL-ER5520G is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER5520G, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-ER7520G of P&L Technologies Ltd.

TL-ER7520G is a new generation of full gigabit enterprise router product. A denial-of-service vulnerability exists in the TL-ER7520G from P&L Technologies, which can be exploited by attackers to cause a denial of service...

go -- cmd/go: packages using cgo can cause arbitrary code execution at build time; crypto/elliptic: incorrect operations on the P-224 curve

The Go project reports: The go command may execute arbitrary code at build time when cgo is in use on Windows. This may occur when running "go get", or any other command that builds code. Only users who build untrusted code and don't execute it are affected. In addition to Windows users, this can...

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ShowStopper - Anti-Debug tricks exploration tool

The ShowStopper project is a tool to help malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods. With this tool, you can attach a debugger to its process and research the debugger’s behavior for the...

CVE-2020-28342

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 China / India software. The S Secure application allows attackers to bypass authentication for a locked Gallery application via the Reminder application. The Samsung ID is SVE-2020-18689 November 2020...

j-p-management.com Cross Site Scripting vulnerability OBB-1465330

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

p-shop.hk Improper Access Control vulnerability OBB-1462262

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2020-2227)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-12500

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions allows unauthenticated device administration...

Authorization

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions use undocumented accounts...

CVE-2020-12503

CVE-2020-12503 affects Pepperl+Fuchs P+F Comtrol RocketLinx devices (ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN with firmware 1.2.3 and earlier. The vulnerability...

CVE-2020-12501

CVE-2020-12501 concerns Pepperl+Fuchs P+F Comtrol RocketLinx devices. The vulnerability is described as an improper authorization issue due to undocumented accounts present on affected models: RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510...

CVE-2020-12500 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions allows unauthenticated device administration...