11645 matches found
CVE-2018-20843 affecting package expat 2.2.6-4
CVE-2018-20843 affecting package expat 2.2.6-4. A patched version of the package is available...
CVE-1999-0612 affecting package finger 0.17-4
CVE-1999-0612 affecting package finger 0.17-4. A patched version of the package is available...
PT-2020-14629
Name of the Vulnerable Software and Affected Versions Spectrum Power 4 versions prior to V4.70 SP8 Description A security issue has been identified where sensitive information is stored insecurely in configuration files, potentially allowing the retrieval of user names. Recommendations For versio...
PT-2020-14635
Name of the Vulnerable Software and Affected Versions Spectrum Power 4 versions prior to V4.70 SP8 Description A vulnerability has been identified that could make the web server susceptible to a directory listing attack if it is configured in an insecure manner. Recommendations For versions prior...
CVE-2020-15790: Exposure of Information Through Directory Listing
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. If configured in an insecure manner, the web server might be susceptible to a directory listing attack...
CVE-2020-15784: Cleartext Storage of Sensitive Information
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. Insecure storage of sensitive information in the configuration files could allow the retrieval of user names...
Integer overflow
u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...
CVE-2019-10615
u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...
CVE-2019-10615: Integer Overflow or Wraparound
u'Possibility of integer overflow in keymaster 4 while allocating memory due to multiplication of large numcerts value and size of keymaster bob which can lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT...
Attacking the Qualcomm Adreno GPU
Posted by Ben Hawkes, Project Zero When writing an Android exploit, breaking out of the application sandbox is often a key step. There are a wide range of remote attacks that give you code execution with the privileges of an application like the browser or a messaging application, but a sandbox...
PT-2020-9110
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in APQ8009, APQ8017, APQ8053, APQ8096AU, APQ8098, Kamorta, MDM9150, MDM9205, MDM9206, MDM9607, MDM9650, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8998, Nicobar,...
Vulnerabilities fixed in Siemens Spectrum Power
Siemens has fixed two vulnerabilities in Spectrum Power 4. An unauthenticated malicious person could exploit the vulnerabilities to gain access to system data and sensitive data. Siemens has updates and mitigations available to address the vulnerabilities in Spectrum Power. However, these have no...
jira.blackpepper.co.uk Cross Site Scripting vulnerability OBB-1303129
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
oncologynation.com Cross Site Scripting vulnerability OBB-1302945
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bettertristatejobs.com Cross Site Scripting vulnerability OBB-1302815
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
corneliart-marin.odexpo.com Cross Site Scripting vulnerability OBB-1302660
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
octocontent.com Cross Site Scripting vulnerability OBB-1302652
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
balkongelaender.at Cross Site Scripting vulnerability OBB-1302451
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
starinni-kyhni-asenovgrad.nowdom.com Cross Site Scripting vulnerability OBB-1302403
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
dvymestni-ychilishtni-chinove.nowdom.com Cross Site Scripting vulnerability OBB-1302402
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...