CVE-2020-11646

CVE-2020-11646 is a log information disclosure vulnerability in B&R GateManager and related SiteManager components. An authenticated user can view information about logs and devices belonging to their own or a foreign domain, exposing sensitive data. Affected versions include GateManager 4260 and...

CVE-2020-11646 GateManager Log Information Disclosure Vulnerability

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11645

CVE-2020-11645 is a DoS vulnerability affecting B&R GateManager 4260/9250 (versions prior to 9.0.20262) and GateManager 8250 (prior to 9.2.620236042). An authenticated user can limit the availability of GateManager instances. The issue is documented in multiple sources (NVD/NVD-variants, CISA ICS...

CVE-2020-11645 GateManager Denial of Service Vulnerability

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11642 SiteManager Denial of Service via Local File Inclusion Vulnerability

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11642

CVE-2020-11642 affects B&R SiteManager (all versions

CVE-2020-11641 SiteManager Local File Inclusion Vulnerability

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11641

CVE-2020-11641 is a path traversal vulnerability affecting B&R SiteManager (all versions before v9.2.620236042) and GateManager (before v9.0.20262 for 4260/9250, and before v9.2.620236042 for 8250). The authenticated attacker can read sensitive files from SiteManager instances, leveraging imprope...

CVE-2020-11644

CVE-2020-11644 affects B&R GateManager 4260/9250 (pre-9.0.20262 and pre-9.2.620236042 respectively) and GateManager 8250 (pre-9.2.620236042). The vulnerability arises from improper authentication that allows an authenticated attacker to generate fake audit log messages, enabling information expos...

CVE-2020-11644 GateManager Audit Message Spoofing Vulnerability

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-11643

CVE-2020-11643 is a validated information-disclosure vulnerability in B&R GateManager 4260/9250 (<9.0.20262) and GateManager 8250 (

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: R-SeeNet Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the...

CVE-2020-26604

An issue was discovered in SystemUI on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 October 2020...

RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...

randrcommercialrealty.com Cross Site Scripting vulnerability OBB-1382011

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Important: Red Hat Security Advisory: qemu-kvm-ma security update

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

B&R Automation SiteManager and GateManager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Industrial Automation GmbH Equipment: SiteManager and GateManager Vulnerabilities: Path Traversal, Uncontrolled Resource Consumption, Information Exposure, Improper Authentication, Information...

r-ijin.com Cross Site Scripting vulnerability OBB-1349964

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

r-soudan.jp Cross Site Scripting vulnerability OBB-1340189

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

walter-r-habicht.de Cross Site Scripting vulnerability OBB-1285201

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...