PT-2020-9256

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

mail.homegrid.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1173729 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

tintas2000.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1163083 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

PT-2020-8068

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment, there is no information about a newer version...

PT-2020-8066

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment, there is no information about a newer version...

PT-2020-8067

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was withdrawn by its CNA, as stated in the National Vulnerability Database. Recommendations: At the moment, there is no information about a newer version...

online24.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1150300 Security Researcher DkilerS2 Helped patch 112 vulnerabilities Received 4 Coordinated Disclosure badges Received 8 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting online24.pt website and its...

PT-2020-2250

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially crafte...

PT-2020-11228

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in an unassigned CNA pool during 2019. Recommendations At the moment, there is no information about a newer version that contains a...

CVE-2020-6993

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...

CVE-2020-6995

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...

CVE-2020-6993

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...

CVE-2020-6995

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...

CVE-2020-6985

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console...

CVE-2020-6985

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console...

CVE-2020-6995

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...

Authorization

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...

CVE-2020-6993

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...

Hardcoded credentials

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console...

Default credentials

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...