PT-2020-6027

Name of the Vulnerable Software and Affected Versions No specific software or version information is provided. Description The issue is related to a buffer overflow in the stack due to inadequate input processing in the webSetWizardVariables function of the embedded web server software. This coul...

PT-2020-6026

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a buffer overflow in the stack due to inadequate input processing in the webSettingProfileGeneral function of the embedded web serv...

PT-2020-6031

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned, use: Embedded web server affected versions not specified Description The issue is related to insufficient input validation in the MtcSetDataItemt function of the embedded web server. This can be...

PT-2020-6030

Name of the Vulnerable Software and Affected Versions Embedded web server affected versions not specified Description The issue is related to insufficient input validation in the MtcSetDataItem function of the embedded web server. This can be exploited by a remote attacker to elevate privileges a...

PT-2020-6028

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue is related to a buffer overflow in the stack due to inadequate input processing in the webSetSerialOpModel function of the embedded web server software. This could allow a remot...

PT-2020-6024

Name of the Vulnerable Software and Affected Versions No specific software or version is mentioned in the provided description. Description The issue is related to the webSetFrmUpgrade function of an embedded web server, which is vulnerable due to a buffer copy without checking the size of the...

PT-2020-6029

Name of the Vulnerable Software and Affected Versions Embedded web server software affected versions not specified Description The issue is related to a buffer overflow in the stack due to inadequate input processing in the webSetHostTable function of the embedded web server software. This can be...

Fedora: Security Advisory for php (FEDORA-2020-4fe6b116e5)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CSRFER - Tool To Generate CSRF Payloads Based On Vulnerable Requests

CSRFER is a tool to generate csrf payloads, based on vulnerable requests. It parses supplied requests to generate either a form or a fetch request. The payload can then be embedded in an html template. Installation / / | \ | | \ | / /\ --.| |/ / | | | | |/ / | | --. \ /| | | || / | /// / |\ |...

Google Chrome Sailfish Code Execution

The vulnerability of the Google Chrome and Sailfish Browser rendering process is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure or execute arbitrary code by deleting the current embedded HTML obje...

Fedora: Security Advisory for php (FEDORA-2020-4573f0e03a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Important: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...

EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2020-2146)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected...

Microsoft Windows XP Source Code Reportedly Leaked Online

Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...

CVE-2020-3508 Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability

A vulnerability in the IP Address Resolution Protocol ARP feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers with a 20-Gbps Embedded Services Processor ESP installed could allow an unauthenticated, adjacent attacker to cause an affected device to reload,...

[SECURITY] Fedora 32 Update: mbedtls-2.16.8-1.fc32

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

OPENSUSE-SU-2020:1506-1 Security update for lilypond

This update for lilypond fixes the following issues: - CVE-2020-17353: When -dsafe is used, LilyPond lacks restrictions on embedded-ps and embedded-svg boo1174949. This update was imported from the openSUSE:Leap:15.2:Update update project...

OPENSUSE-SU-2020:1453-1 Security update for lilypond

This update for lilypond fixes the following issues: - CVE-2020-17353: When -dsafe is used, LilyPond lacks restrictions on embedded-ps and embedded-svg boo1174949...

Design/Logic Flaw

A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader TCCL. This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is ...