CVE-2020-6980

Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior, If Simple Mail Transfer Protocol SMTP account data is saved in RSLogix 500, a local attacker with access to a...

CVE-2020-1736

A flaw was found in Ansible Engine when a file is moved using atomicmove primitive as the file mode cannot be specified. This sets the destination files world-readable if the destination file does not exist and if the file exists, the file could be changed to have less restrictive permissions...

PT-2020-14921

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.x through 2.9.x Description A flaw was found in Ansible Engine when a file is moved using the atomic move primitive, as the file mode cannot be specified. This sets the destination file's world-readable if the...

CVE-2019-5134

An exploitable regular expression without anchors vulnerability exists in the Web-Based Management WBM authentication functionality of WAGO PFC200 versions 03.00.3912 and 03.01.0713, and WAGO PFC100 version 03.00.3912. A specially crafted authentication request can bypass regular expression...

PT-2020-6579

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.17 and prior Ansible Engine versions 2.8.9 and prior Ansible Engine versions 2.9.6 and prior Description The issue is related to a race condition flaw in Ansible Engine when running a playbook with an unprivileged...

Out-of-bounds

In rwi93smupdatendef of rwi93.cc, there is a possible read of uninitialized data due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0...

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

PT-2020-4012 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to improper data forwarding in some data cache for IntelR Processors, which may allow an authenticated user to potentially enable information disclosure via...

The vulnerability of the Network Driver Interface Standard (NDIS) implementation in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Network Driver Interface Standard NDIS implementation in Windows operating systems exists due to an object handling error in memory. Exploiting this vulnerability can allow a perpetrator to disclose protected information through a specially created application...

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Johnson Controls Equipment: Metasys Vulnerability: Improper Restriction of XML External Entity Reference 2. RISK EVALUATION Successful exploitation of this vulnerability can allow a...

The vulnerability of microprogramming software for Intel processors and Intel Processor Graphics lies in the lack of protection for system data, which allows attackers to disclose protected information.

The vulnerability of microprogrammed software in Intel processors and Intel Processor Graphics is related to the lack of protection for system data. Exploiting this vulnerability can allow attackers to disclose protected information...

Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-20197)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The QCS605 is a central processing unit CPU product. A buffer overflow vulnerability exists in Data Modem in multiple Qualcomm products, which ca...

The vulnerability of the L2CAPGET_CONF_OPT function in Linux operating systems, related to the disclosure of information, allows attackers to gain access to confidential data. [source-iocs-preserved const=L2CAP_GET_CONF_OPT]

The vulnerability of the L2CAPGETCONFOPT function in Linux operating systems is related to buffer overflows in the queue. Exploiting this vulnerability allows a remote attacker to gain access to confidential data. source-iocs-preserved const=L2CAPGETCONFOPT...

The vulnerability in the web interface for managing Microprogramming Software on Cisco Small Business Smart and Managed Switches allows a perpetrator to execute arbitrary code or disclose sensitive information.

The vulnerability in the web interface for managing Microprogramming Software on Cisco Small Business Smart and Managed Switches exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

The vulnerability in the web interface of the Cisco Jabber Guest software allows a attacker to execute arbitrary code in the context of the current user or disclose sensitive information.

The vulnerability in the Cisco Jabber Guest software’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to disclose sensitive...

The vulnerability in the web interface of the Cisco Data Center Analytics Framework allows a perpetrator to execute arbitrary code in the context of the current user or disclose protected information.

The vulnerability in the web interface of the Cisco Data Center Analytics Framework exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to disclos...

The vulnerability in the web interface of the Cisco Crosswork Change Automation software allows a malicious actor to execute arbitrary code in the context of the current user or disclose protected information.

The vulnerability of the Cisco Crosswork Change Automation software’s web interface exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user or disclose sensitive...

The vulnerability in the web interface of the Cisco Email Security Appliance allows a perpetrator to execute arbitrary code in the context of the current user or disclose protected information.

The vulnerability in the web interface of the Cisco Email Security Appliance exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to disclose...

The vulnerability of the Cisco AnyConnect Secure Mobility Client cryptographic protection mechanism is related to insufficient verification of data authenticity, which allows attackers to trigger service failures or disclose protected information.

The vulnerability of the Cisco AnyConnect Secure Mobility Client encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to cause service failures or expose the protected information...