2516 matches found
CVE-2020-28341: Buffer Copy without Checking Size of Input
An issue was discovered on Samsung mobile devices with Q10.0 Exynos990 chipsets software. The S3K250AF Secure Element CC EAL 5+ chip allows attackers to execute arbitrary code and obtain sensitive information via a buffer overflow. The Samsung ID is SVE-2020-18632 November 2020...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
CVE-2020-5652
The CVE-2020-5652 vulnerability affects Mitsubishi Electric MELSEC iQ-R, Q, and L Series CPU modules. A specially crafted Ethernet packet can cause uncontrolled resource consumption, stopping Ethernet communications and leading to a DoS. Affected products include iQ-R CPUs (R00, R01, R02, R04 EN,...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
PT-2020-18619 · Mitsubishi · Melsec Q03 Udecpu +11
Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series CPU modules versions '20' and earlier MELSEC Q series CPU modules versions '52' and earlier MELSEC L series CPU modules versions with serial number '22081' and earlier MELSEC iQ-R R 04/08/16/32/120 EN CPU firmware versions...
CVE-2020-5652: Uncontrolled Resource Consumption
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...
CVE-2020-24990
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
CVE-2020-24990
The CVE-2020-24990 issue affects QSC Q-SYS Core Manager 8.2.1 via the TFTP service on UDP/69, enabling a directory traversal to read OS files (e.g., /etc/passwd, /proc/version). Root cause: TFTP GET requests bypass path filtering. Impact is partial confidentiality loss without integrity/availabil...
CVE-2020-24990: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
PT-2020-15879
Name of the Vulnerable Software and Affected Versions QSC Q-SYS Core Manager version 8.2.1 QSC Q-SYS Core Manager versions prior to 8.2.1 Description An issue was discovered in QSC Q-SYS Core Manager. A remote attacker can perform a directory traversal via the TFTP service running on UDP port 69...
q-foodbar.be Cross Site Scripting vulnerability OBB-1431909
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-26600
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
CVE-2020-26599
An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...
CVE-2020-26600
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
CVE-2020-26601
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...
Code injection
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...