12310 matches found
Important: Red Hat Security Advisory: qemu-kvm-ma security update
An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
usbdpower.com Cross Site Scripting vulnerability OBB-1368262
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in PV Power Plant Monitoring System of Jiangsu Goodway Power Technology Co.
Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...
power-dating.com Cross Site Scripting vulnerability OBB-1346781
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
power-studio.eu Cross Site Scripting vulnerability OBB-1338592
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-12788
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...
Code injection
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...
CVE-2020-12788
The CVE concerns CMAC verification in Microchip Atmel ATSAMA5 products. The issue stems from side-channel weaknesses (timing and power analysis) during CMAC verification, which could potentially expose sensitive information. Connected documents reiterate the affected target as ATSAMA5, but do not...
CVE-2020-12788
CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...
Ranking National Cyber Power
Harvard Kennedy Schools Belfer Center published the "National Cyber Power Index 2020: Methodology and Analytical Considerations." The rankings: 1. US, 2. China, 3. UK, 4. Russia, 5. Netherlands, 6. France, 7. Germany, 8. Canada, 9. Japan, 10. Australia, 11. Israel. More countries are in the...
CVE-2020-15790
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. If configured in an insecure manner, the web server might be susceptible to a directory listing attack...
CVE-2020-15790
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. If configured in an insecure manner, the web server might be susceptible to a directory listing attack...
CVE-2020-15784
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. Insecure storage of sensitive information in the configuration files could allow the retrieval of user names...
CVE-2020-15784
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. Insecure storage of sensitive information in the configuration files could allow the retrieval of user names...
Information disclosure
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. Insecure storage of sensitive information in the configuration files could allow the retrieval of user names...
Design/Logic Flaw
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. If configured in an insecure manner, the web server might be susceptible to a directory listing attack...
CVE-2020-15790
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. If configured in an insecure manner, the web server might be susceptible to a directory listing attack...
CVE-2020-15790
CVE-2020-15790 affects Siemens Spectrum Power 4 (all versions before v4.70 SP8) and is tied to Expos ure of Information Through Directory Listing when the web server is misconfigured. The connected advisory (ICS-CISA ICSA-20-252-04 and related Siemens/Red Hat/NVD records) confirms a directory-lis...
CVE-2020-15784
A vulnerability has been identified in Spectrum Power 4 All versions V4.70 SP8. Insecure storage of sensitive information in the configuration files could allow the retrieval of user names...
CVE-2020-15784
Summary (CVE-2020-15784) Affected product: Siemens Spectrum Power 4 (all versions prior to v4.70 SP8). Vulnerability: Insecure storage of sensitive information in configuration files could allow retrieval of usernames (CWE-312). This is the root cause described in the sources. Impact: Potential d...