5839 matches found
CVE-2020-25170 B. Braun OnlineSuite
An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...
CVE-2020-25170
The CVE-2020-25170 entry concerns B. Braun OnlineSuite (AP 3.0 and earlier). The issue is an Excel Macro Injection vulnerability in the export feature caused by mishandling in the Excel export of multiple input fields. The affected component is the export path within OnlineSuite, with root cause ...
PT-2020-15995
Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description A relative path traversal attack allows unauthenticated attackers to upload or download arbitrary files. Recommendations For versions prior to AP 3.0, update to a version that fixes thi...
PT-2020-15996
Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description A DLL hijacking issue allows local attackers to execute code on the system as a high privileged user. This enables them to potentially gain elevated access and perform unauthorized...
PT-2020-15993
Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description An Excel Macro Injection issue exists in the export feature due to mishandled input fields in the Excel export. Recommendations For versions prior to AP 3.0, consider disabling the expo...
CVE-2020-25170: Improper Neutralization of Formula Elements in a CSV File
An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...
CVE-2020-25174: Uncontrolled Search Path Element
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...
CVE-2020-25172: Relative Path Traversal
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...
b-unique.ro Cross Site Scripting vulnerability OBB-1476022
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
b-ok.cc Cross Site Scripting vulnerability OBB-1462132
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ads-b.nl Cross Site Scripting vulnerability OBB-1457294
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
About the security content of Apple Music 3.4.0 for Android
About the security content of Apple Music 3.4.0 for Android This document describes the security content of Apple Music 3.4.0 for Android. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred an...
PT-2020-6692
Name of the Vulnerable Software and Affected Versions B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier B. Braun Melsungen AG Data module compactplus versions A10 and A11 Description The issue is related to the configuration import mechanism, which allows attackers with command line...
B. Braun OnlineSuite
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low and high skill level to exploit Vendor: B. Braun Melsungen AG Equipment: OnlineSuite Vulnerabilities: Relative Path Traversal, Uncontrolled Search Path Element, Improper Neutralization of Formula Elements in a CSV File 2. RISK...
CVE-2020-6085
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...
Denial of service
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...
CVE-2020-6084
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...
CVE-2020-6085
CVE-2020-6085 affects Allen-Bradley Flex IO 1794-AENT/B (4.003) via the ENIP Request Path Logical Segment. A specially crafted Electronic Key Segment with fewer than 0x18 bytes after the Key Format field can cause the device to fault and stop remote communications, resulting in a denial-of-servic...
CVE-2020-6084
CVE-2020-6084 affects Allen-Bradley Flex IO 1794-AENT/B (Series B) with firmware 4.003, and is tied to the ENIP Request Path Logical Segment. A remote attacker can send an Electronic Key Segment with fewer bytes than required by the Key Format Table, causing the device to fault and stop remote co...
CVE-2020-6085: Buffer Copy without Checking Size of Input
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a...