PT-2020-3694

Name of the Vulnerable Software and Affected Versions NPort IAW5000A-I/O Series affected versions not specified Description The issue is related to session management errors in the NPort IAW5000A-I/O Series web server software. Exploitation of this issue could allow a remote attacker to elevate...

PT-2020-3695

Name of the Vulnerable Software and Affected Versions NPort IAW5000A-I/O Series affected versions not specified Description The issue is related to inadequate access control in the NPort IAW5000A-I/O Series web server software. It allows a remote attacker to send arbitrary requests to the...

PT-2020-3697

Name of the Vulnerable Software and Affected Versions NPort IAW5000A-I/O Series affected versions not specified Description The issue is related to the implementation of the Basic HTTP Authentication method in the NPort IAW5000A-I/O Series web server software, which involves the transmission of...

PT-2020-3698

Name of the Vulnerable Software and Affected Versions MOXA NPort IAW5000A-I/O firmware versions 2.1 and lower Description The issue is related to the implementation of SSH/Telnet protocols in the MOXA NPort IAW5000A-I/O Series web server software, which lacks sufficient restrictions on...

PT-2020-3699

Name of the Vulnerable Software and Affected Versions NPort IAW5000A-I/O Series affected versions not specified Description The issue is related to a lack of protection for service data in the NPort IAW5000A-I/O Series web server software. This could allow a remote attacker to disclose protected...

UBUNTU-CVE-2020-12829

In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPYAREA macro while handling MMIO write operations through the sm5012denginewrite callback. A local attacker could abuse this flaw to crash the QEMU process in sm5012doperatio...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

[SECURITY] Fedora 32 Update: squid-4.11-1.fc32

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

vet-o-vet.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1161678 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

USN-4345-1: Linux kernel vulnerabilities | Cloud Foundry

Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial...

PT-2020-3072

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a buffer overflow in the Direct IO function of the Linux kernel, which can be exploited to gain unauthorized access to protected information or cause a denial o...

RUSTSEC-2020-0021 rio allows a use-after-free buffer access when a future is leaked

When a rio::Completion is leaked, its drop code will not run. The drop code is responsible for waiting until the kernel completes the I/O operation into, or out of, the buffer borrowed by rio::Completion. Leaking the struct will allow one to access and/or drop the buffer, which can lead to a...

unbound security update

1.7.3-10 - Secure ipsec mode 1772061 - CVE-2019-18934 1.7.3-9 - Use pthreadmutext locks when dealing with I/O operations 1775708...

RHEL 7 / 8 : OpenShift Container Platform 4.4.3 cri-o (RHSA-2020:1937)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1937 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

o-oe.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155210 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

o-zza.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1154830 Security Researcher Teamhash Helped patch 381 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting o-zza.ru website and its...

EulerOS Virtualization for ARM 64 3.0.2.0 : telnet (EulerOS-SA-2020-1541)

According to the version of the telnet package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container...

USN-4342-1: Linux kernel vulnerabilities

Al Viro discovered that the Linux kernel for s390x systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2020-11884 It was discovered that t...

CVE-2020-12446

The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register MSR registers, and input from and output to I/O ports to local non-privileged users. This leads to privilege escalation to NT...

USN-4346-1 linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

It was discovered that the QLogic Fibre Channel driver in the Linux kernel did not properly check for error, leading to a NULL pointer dereference. A local attacker could possibly use this to cause a denial of service system crash. CVE-2019-16233 It was discovered that the Intel Wi-Fi driver in t...