Untrusted Search Path

PostgreSQL is vulnerable to untrusted search path. A flaw was found in the way PostgreSQL allows authenticated users to execute security-definer functions. It was possible for an unprivileged user to execute arbitrary code with the privileges of the security-definer function...

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces allows a intruder to gain unauthorized access to protected information.

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces lies in the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2018-21061

An issue was discovered on Samsung mobile devices with N7.1 and O8.x software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 August 2018...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with N7.1 and O8.x software. A fake charger can execute critical functions in the locked state. The Samsung ID is SVE-2016-6341 August 2018...

USN-4326-1: libiberty vulnerabilities

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary...

WordPress OneTone theme cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.OneTone theme is a responsive website theme plugin used in it. A cross-site scripting vulnerability exists in the...

WordPress OneTone theme unauthorized operation vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.OneTone theme is a responsive website theme plugin used in it. A security vulnerability exists in the includes/theme-functions.php file...

CVE-2020-10265

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safe...

CVE-2020-10265 RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions

Universal Robots Robot Controllers Version CB2 SW Version 1.4 upwards, CB3 SW Version 3.0 and upwards, e-series SW Version 5.0 and upwards expose a service called DashBoard server at port 29999 that allows for control over core robot functions like starting/stopping programs, shutdown, reset safe...

CVE-2020-10265

The CVE-2020-10265 entry covers UR Universal Robots Robot Controllers (CB2 1.4+, CB3 3.0+, e-series 5.0+) exposing a DashBoard server on port 29999 that allows control over core robot functions (start/stop programs, shutdown, reset safety, etc.) without authentication/authorization. This unauthen...

CVE-2019-17230

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes...

Cross site scripting

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues...

Unauthorized Access

libreoffice allows unauthorized access to application functions. The remote resources protection module is not applied to bullet graphics, allowing any user to enable stealth mode to retrieve remote resources...

The vulnerability of the Windows Error Reporting service on Windows operating systems allows a perpetrator to gain access to confidential information and system functions.

The vulnerability of the Windows Error Reporting service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to access confidential information and system functions through a specially created application...

CVE-2018-12641

An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglearmhptemplate, demangleclassname, demanglefundtype, dotype, doarg,...

Mitsubishi Electric MELQIC IU1 TCP Function Code Issue Vulnerability

The Mitsubishi Electric MELQIC IU1 is an IU1 series data collection analyzer from Mitsubishi Electric Mitsubishi, Japan. A code issue vulnerability exists in the TCP function in the Mitsubishi Electric MELQIC IU1 IU1-1M20-D using firmware version 1.0.7 and earlier. A remote attacker could exploit...

CVE-2020-5547

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

CVE-2020-5547

Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet...

CVE-2020-5545

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet...

CVE-2020-5543

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop the network functions or execute malware via a specially crafted packet...