PT-2020-18991

Name of the Vulnerable Software and Affected Versions SAP APPL versions 600 through 606, 616 SAP FIN versions 617 through 618, 700, 720, 730 SAP S/4 HANA versions 100 through 104 Description The issue is related to Missing Authorization Check in VAT Pro-Rata reports. This occurs because the repor...

CVE-2019-16336: Buffer Copy without Checking Size of Input

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...

PT-2020-9816

Name of the Vulnerable Software and Affected Versions Cypress PSoC 4 BLE component versions 3.61 and earlier Description The issue concerns the Bluetooth Low Energy implementation, which improperly handles data channel frames with a payload length larger than the configured link layer maximum RX...

CVE-2019-16336

The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers in radio range to cause a denial of service crash via a crafted BLE Li...

CVE-2020-6188: Missing Authorization

VAT Pro-Rata reports in SAP ERP SAPAPPL versions 600, 602, 603, 604, 605, 606, 616 and SAPFIN versions 617, 618, 700, 720, 730 and SAP S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check...

PT-2020-2437

Name of the Vulnerable Software and Affected Versions SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules All versions Description The issue is related to insufficient input validation, which can be exploited by sending specially crafted packets to the port...

CVE-2019-17061

The Bluetooth Low Energy BLE stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID LLID equal to zero. This allows attackers within radio range to cause...

CVE-2019-17061

The CVE-2019-17061 entry concerns the Bluetooth Low Energy (BLE) stack in Cypress PSoC 4 devices (up to version 3.62). The issue is that the BLE Link Layer header is not properly restricted when processing a packet with LLID = 0, allowing an attacker in radio range to trigger a deadlock, anomalou...

CVE-2019-17061: Buffer Copy without Checking Size of Input

The Bluetooth Low Energy BLE stack implementation on Cypress PSoC 4 through 3.62 devices does not properly restrict the BLE Link Layer header and executes certain memory contents upon receiving a packet with a Link Layer ID LLID equal to zero. This allows attackers within radio range to cause...

photovoltaik.eu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1088534 Security Researcher MrRain1996 Helped patch 959 vulnerabilities Received 4 Coordinated Disclosure badges Received 9 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting photovoltaik.eu website a...

byronunited.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1087773 Security Researcher haxmov Helped patch 715 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting byronunited.ca website and it...

ynyshir.co.uk Cross Site Scripting vulnerability

Security Researcher securaji Helped patch 77 vulnerabilities Received 3 Coordinated Disclosure badges Received 4 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting ynyshir.co.uk website and its users. Following coordinated a...

Sql injection

Multiple SQL injection vulnerabilities in ZeusCart 4.x...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

CVE-2019-20433

libaspell.a in GNU Aspell before 0.60.8 has a buffer over-read for a string ending with a single '\0' byte, if the encoding is set to ucs-2 or ucs-4 outside of the application, as demonstrated by the ASPELLCONF environment variable...

PT-2020-2763

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8 Description The issue is caused by a buffer over-read in the libaspell.a component of GNU Aspell. This occurs when a string ends with a single '0' byte and the encoding is set to ucs-2 or ucs-4 outside of th...