7003 matches found
harfner-communications.com Cross Site Scripting vulnerability OBB-1340639
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Denial of Service Vulnerability in Schneider Electric Modicon M580 (CNVD-2020-55774)
The Modicon M580 is a programmable logic controller from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580, which can be exploited by an attacker to cause a denial of service in the PLC and disrupt remote communication with the device...
Modbus Banner Grabbing
This module grabs the banner of any device running the Modbus protocol by sending a request with Modbus Function Code 43 Read Device Identification. Modbus is a data communications protocol originally published by Modicon now Schneider Electric in 1979 for use with its programmable logic...
CVE-2020-1968
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...
Vulnerability in OpenSSL - Raccoon Attack
The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a Diffie-Hellman DH based ciphersuite. In such a case this would result in the attacker being able to eavesdrop on all encrypted...
Design/Logic Flaw
All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements...
CVE-2020-14514
CVE-2020-14514 affects all trailer Power Line Communications PLC buses. The issue: PLC bus traffic can be sniffed with an active antenna up to 6 feet away (potentially farther depending on environment), exposing confidential data from trailer ECUs. The CVSS v3.1 base score is 4.3 (Medium) with AV...
CVE-2020-14514 Trailer Power Line Communications vulnerability
All trailer Power Line Communications are affected. PLC bus traffic can be sniffed reliably via an active antenna up to 6 feet away. Further distances are also possible, subject to environmental conditions and receiver improvements...
Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process
When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...
Becoming a Comms and Analyst Relations Leader, Rita Aspen - Head, Communications & Analyst Relations, APJ
My parents were first-generation immigrants from India. They worked hard, made Singapore their home and took all and any challenges head on. They have always lived by the simple philosophy, 'to be the change'. It's a philosophy that I try to live too, and in many ways it's what attracted me to...
F5 Networks BIG-IP : F5 SSH server key size vulnerability (K43404629)
The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.2 / 13.1.3.6 / 14.1.2.4 / 15.0.1.4 / 15.1.0.5 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K43404629 advisory. The BIG-IP and BIG-IQ host OpenSSH servers use keys less than 2048 bits...
Cisco Unified Communications Manager XSS (cisco-sa-cucm-cuc-imp-xss-XtpzfM5e)
According to its self-reported version, Cisco Unified Communications Manager is affected by a cross-site scripting XSS vulnerability in its web interface component due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this,...
CVE-2020-3346
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
CVE-2020-3346
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
Cross site scripting
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
CVE-2020-3346 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
CVE-2020-3346
CVE-2020-3346 affects Cisco Unified Communications Manager (Unified CM) web UI and Unified CM SME. The issue is a cross-site scripting (XSS) vulnerability caused by insufficient input validation in the web-based interface, enabling an unauthenticated, remote attacker to entice a user to click a c...
CVE-2020-3346 Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
A vulnerability in the web UI of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The...
The vulnerability of the WebGUI component of the Oracle Enterprise Communications Broker, related to insufficient input validation, allows a perpetrator to gain unauthorized access to protected information or to read, modify, add, or delete data.
The vulnerability of the WebGUI component of the Oracle Enterprise Communications Broker lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to read, modify, add, or delete...
Cisco Unified Communications Manager Cross-Site Scripting (cisco-sa-cucm-selfcare-drASc7sr)
According to its self-reported version, Cisco Unified Communications Manager is affected by a Cross-Site Scripting vulnerability that could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficien...