CVE-2020-14010: Improper Neutralization of Input During Web Page Generation

The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q aka name parameter...

PT-2020-13837

Name of the Vulnerable Software and Affected Versions The Laborator Xenon theme version 1.3 Description The issue allows for Reflected XSS, which can be exploited via the data/typeahead-generate.php endpoint, specifically through the q also known as name parameter. Recommendations For version 1.3...

singapore.job-q.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1188220 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-13832

An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...

CVE-2020-13832

An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...

CVE-2020-13834

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 with TEEGRIS software. Secure Folder does not properly restrict use of Android Debug Bridge adb for arbitrary installations. The Samsung ID is SVE-2020-17369 June 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with Q10.0 software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 June 2020...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...

CVE-2020-13832

An issue was discovered on Samsung mobile devices with Q10.0 with TEEGRIS on Exynos chipsets software. The Widevine Trustlet allows arbitrary code execution because of memory disclosure, The Samsung IDs are SVE-2020-17117, SVE-2020-17118, SVE-2020-17119, and SVE-2020-17161 June 2020...

CVE-2020-13832

Technical details about CVE-2020-13832 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-13836

CVE-2020-13836 affects Samsung mobile devices running O(8.x), P(9.0), and Q(10.0). A path traversal vulnerability exists in the HWRResProvider that can lead to data exposure. This is documented across multiple sources (including NVD, Red Hat, CNVD, CVE lists) with the Samsung ID SVE-2020-16954. T...

CVE-2020-13837

CVE-2020-13837 concerns Samsung mobile devices running Q(10.0). The issue is that the Lockscreen does not block access to Music Share via the Quick Panel, allowing potential exposure of Music Share controls or data when the device is locked. The Samsung Internal ID is SVE-2020-17145 (June 2020). ...

CVE-2020-13838

CVE-2020-13838 affects Samsung mobile devices running P (9.0) and Q (10.0) software, where the DeX Lockscreen fails to block access to the Quick Panel and notifications. The issue is documented across multiple sources (NVD entry and Red Hat advisory) without details on a concrete exploit vector o...

CVE-2020-13833: Improper Link Resolution Before File Access

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 June 2020...

CVE-2020-13837: Missing Authentication for Critical Function

An issue was discovered on Samsung mobile devices with Q10.0 software. The Lockscreen feature does not block Quick Panel access to Music Share. The Samsung ID is SVE-2020-17145 June 2020...

PT-2020-13713

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 software Description An issue was discovered that allows arbitrary code execution due to memory disclosure in the Widevine Trustlet on Samsung mobile devices with Q10.0 software, specifically those with TEEGRI...

CVE-2020-13829: Undefined Security Weakness

An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can disable the SEAndroid protection mechanism in the RKP. The Samsung ID is SVE-2019-15998 June 2020...

CVE-2020-13836: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. HWRResProvider allows path traversal for data exposure. The Samsung ID is SVE-2020-16954 June 2020...

singapore.job-q.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1177095 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Mitsubishielectric Q03\/04\/06\/13\/26udvcpu Uncontrolled Resource Consumption

In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior,...