7562 matches found
Denial of Service Vulnerability in Schneider PLC-M580
The M580, a PLC in Schneider's Modicon PLC family, is Schneider Electric's first high-end integrated controller built for the Industrial Internet of Things architecture. A denial of service vulnerability exists in the Schneider PLC-M580, which can be exploited by an attacker to cause the PLC's...
CVE-2020-24807
The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a modified JSON name field. NOTE: This vulnerability only affects products that are no longer supported...
Denial Of Service (DoS)
kernel is vulnerable to denial of service. The vulnerability exists due to an index buffer overflow during Direct IO write leading to the NFS client to crash...
lot7.io Cross Site Scripting vulnerability OBB-1374218
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
PT-2020-5340
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.9.3 Description The issue is related to the io uring function in the Linux kernel, which is associated with errors in privilege assignment. Exploitation of this issue may allow an attacker to elevate their...
EulerOS Virtualization for ARM 64 3.0.6.0 : perl-IO-Compress (EulerOS-SA-2020-2036)
According to the version of the perl-IO-Compress package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that perl can load modules from the current directory if not found in the module directories, via t...
Huawei EulerOS: Security Advisory for perl-IO-Compress (EulerOS-SA-2020-2036)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
An issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq-iosched.c related to bfq_idle_slice_timer_body.
...
The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region a related issue to CVE-2010-0306.
...
PT-2025-23219
Name of the Vulnerable Software and Affected Versions IO::Compress::Brotli versions prior to 0.007 Description A buffer overflow exists in the embedded Brotli library. An attacker controlling the input length of a decompression request can trigger a crash when copying over chunks of data larger...
PT-2020-5874
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.8.10 Description: An issue in the Linux kernel is related to a memory leak in the kvm io bus unregister dev function, located in virt/kvm/kvm main.c, which occurs upon a kmalloc failure. This issue can be...
GHSA-MJ87-8XF8-FP4W Cross-Site Scripting in yui
Affected versions of yui are vulnerable to cross-site scripting in the uploader.swf and io.swf utilities, via script injection in the url. Recommendation YUI has published their recommendation to fix this issue. Their recommendation is to: - Delete self-hosted copies of these files if you are not...
NPort IAW5000A-I/O Series SSH/Telnet Bypass Security Restrictions
The vulnerability of the SSH/Telnet protocol implementations in NPort IAW5000A-I/O Series web servers is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
JVN#50890770: Apache Struts 2 vulnerable to denial-of-service (DoS)
Apache Struts 2 provided by The Apache Software Foundation contains a denial-of-service DoS vulnerability CWE-400. Impact An attacker may be able to cause a denial-of-service DoS. Solution Update the Software Update to the latest version according to the information provided by the developer Appl...
lot7.io Cross Site Scripting vulnerability OBB-1270877
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
NodeBB Elevation of Privilege Vulnerability
NodeBB is a forum system built using Node.js a web application platform built on top of Google's V8 JavaScript engine by the Design Create Play team. A security vulnerability exists in the authentication logic in NodeBB versions 1.12.2 and later fixed in version 1.14.3. An attacker can exploit th...
lot7.io Cross Site Scripting vulnerability OBB-1265879
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hw/pci/msix.c in QEMU 4.2.0 allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation.
...
sun33.io Cross Site Scripting vulnerability OBB-1258907
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Missing Authentication
github.com/etcd-io/etcd does not perform TLS authentication. When starting a gateway for endpoints provided in the --endpoints flag, it does not handle the endpoints validation...