r-kinki.com Improper Access Control vulnerability OBB-3809245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

r-forge.r-project.org Cross Site Scripting vulnerability OBB-3807704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mitsubishi Electric FA Engineering Software Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 Vendor : Mitsubishi Electric Equipment : MELIPC , MELSEC iQ-R, and MELSEC Q Series Vulnerabilities : Processor Optimization Removal or Modification of Security-Critical Code, Observable Discrepancy 2. RISK EVALUATION Successful exploitation of these...

R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure

R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure Vendor: R Radio Network Product web page: http://www.pktc.ac.th Affected version: 1.07 Summary: R Radio FM Transmitter that includes FM Exciter and FM Amplifier parameter setup. Desc: The transmitter suffers from an improper acces...

R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure

Summary R Radio FM Transmitter that includes FM Exciter and FM Amplifier parameter setup. Description The transmitter suffers from an improper access control that allows an unauthenticated actor to directly reference the system.cgi endpoint and disclose the clear-text password of the admin user...

Ubuntu: Security Advisory (USN-6516-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-9799

Name of the Vulnerable Software and Affected Versions IntelR TDX module software versions prior to 1.5.05.46.698 Description The issue is related to improper input validation in the IntelR TDX module software, which may allow a privileged user to potentially enable escalation of privilege via loc...

Ubuntu: Security Advisory (USN-6502-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-14738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data corruption issue was found in the Linux kernel during testing of SMC-R on Redis applications. The issue is caused by a decline message being sent in the implementation and read fr...

USN-6496-1: Linux kernel vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao discover...

S3 Bucket can lead to spread of malicious R package

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL...

r-a.at Improper Access Control vulnerability OBB-3781308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Uncontrolled resource consumption in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-34431: Improper Input Validation

Improper input validation in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28376: Out-of-bounds Read

Out-of-bounds read in the firmware for some IntelR E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-22305: Integer Overflow to Buffer Overflow

Integer overflow in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-34314: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR Simics Simulator software before version 1.7.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27383: Protection Mechanism Failure

Protection mechanism failure in some IntelR oneAPI HPC Toolkit 2023.1 and IntelRMPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

PT-2023-23929

Name of the Vulnerable Software and Affected Versions IntelR QAT versions prior to QAT20.L.1.0.40-00004 Description The issue is related to improper input validation in the firmware, which may allow escalation of privilege and denial of service via adjacent access. Recommendations For versions...

CVE-2023-22313: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access...