Fedora 32 : ansible (2020-d5e74bf9a0)

Update to upstream bugfix and security release 2.9.13. ---- Update to 2.9.12 upstream bugfix and security update Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

crosleyrepros.com Cross Site Scripting vulnerability OBB-1273669

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ksmen.com.cn Cross Site Scripting vulnerability OBB-1272919

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-10125

NCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to validate bunch note acceptor BNA software updates, which can be broken by an attacker with physical access in a sufficiently short period of time, thereby enabling the attacker to sign arbitrary files...

Code injection

NCR SelfServ ATMs running APTRA XFS 05.01.00 do not properly validate softare updates for the bunch note acceptor BNA, enabling an attacker with physical access to internal ATM components to restart the host computer and execute arbitrary code with SYSTEM privileges because while booting, the...

CVE-2020-10126

CVE-2020-10126 concerns NCR SelfServ ATMs running APTRA XFS 05.01.00 . The issue is that the update process during boot does not validate the signature of CAB archives on removable media, causing arbitrary code execution with SYSTEM privileges when updating the BNA (bunch note acceptor). An attac...

PT-2020-11947

Name of the Vulnerable Software and Affected Versions NCR SelfServ ATMs running APTRA XFS versions 04.02.01 through 05.01.00 Description The issue concerns the use of 512-bit RSA certificates in NCR SelfServ ATMs running APTRA XFS to validate software updates for the bunch note acceptor BNA. An...

CVE-2019-20151

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

Cross site scripting

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

CVE-2019-20151

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

PT-2020-10352

Name of the Vulnerable Software and Affected Versions TreasuryXpress version 19191105 Description A security issue was discovered due to the lack of filtering and sanitization of user input, allowing malicious JavaScript to be executed by the application's administrators. A malicious payload can ...

CVE-2019-20151: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in TreasuryXpress 19191105. Due to the lack of filtering and sanitization of user input, malicious JavaScript can be executed by the application's administrators. A malicious payload can be injected within the Multi Approval security component and inserted via the Note...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53558)

Redmi Note 7 generally refers to Redmi Note 7.Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53555)

Redmi Note 7 generally refers to Redmi Note 7.Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53561)

Redmi Note 7 generally refers to the Redmi Note 7.The Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53556)

Redmi Note 7 generally refers to Redmi Note 7.Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53559)

Redmi Note 7 generally refers to the Redmi Note 7.The Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from denial of service vulnerability (CNVD-2020-53552)

Redmi Note 7 generally refers to the Redmi Note 7.The Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53560)

Redmi Note 7 generally refers to Redmi Note 7.Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...

Redmi Note 7 suffers from a denial of service vulnerability (CNVD-2020-53557)

Redmi Note 7 generally refers to Redmi Note 7.Redmi Note 7 is the first product of Xiaomi's Redmi brand of cell phones. The Redmi Note 7 suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause the device program to crash or reboot...