CVE-2020-11645 GateManager Denial of Service Vulnerability

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

CVE-2020-11645

CVE-2020-11645 is a DoS vulnerability affecting B&R GateManager 4260/9250 (versions prior to 9.0.20262) and GateManager 8250 (prior to 9.2.620236042). An authenticated user can limit the availability of GateManager instances. The issue is documented in multiple sources (NVD/NVD-variants, CISA ICS...

CVE-2020-11642 SiteManager Denial of Service via Local File Inclusion Vulnerability

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11642

CVE-2020-11642 affects B&R SiteManager (all versions

CVE-2020-11641 SiteManager Local File Inclusion Vulnerability

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11641

CVE-2020-11641 is a path traversal vulnerability affecting B&R SiteManager (all versions before v9.2.620236042) and GateManager (before v9.0.20262 for 4260/9250, and before v9.2.620236042 for 8250). The authenticated attacker can read sensitive files from SiteManager instances, leveraging imprope...

CVE-2020-11644

CVE-2020-11644 affects B&R GateManager 4260/9250 (pre-9.0.20262 and pre-9.2.620236042 respectively) and GateManager 8250 (pre-9.2.620236042). The vulnerability arises from improper authentication that allows an authenticated attacker to generate fake audit log messages, enabling information expos...

CVE-2020-11644 GateManager Audit Message Spoofing Vulnerability

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-11643

CVE-2020-11643 is a validated information-disclosure vulnerability in B&R GateManager 4260/9250 (<9.0.20262) and GateManager 8250 (

CVE-2020-11641: Files or Directories Accessible to External Parties

A local file inclusion vulnerability in B&R SiteManager versions 9.2.620236042 allows authenticated users to read sensitive files from SiteManager instances...

CVE-2020-11643: Insertion of Sensitive Information into Log File

An information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view information of devices belonging to foreign domains...

CVE-2020-11645: Uncontrolled Resource Consumption

A denial of service vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to limit availability of GateManager instances...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: R-SeeNet Vulnerability: SQL Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow remote attackers to retrieve sensitive information from the...

CVE-2020-11646: Insertion of Sensitive Information into Log File

A log information disclosure vulnerability in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to view log information reserved for other users...

CVE-2020-11642: Files or Directories Accessible to External Parties

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

CVE-2020-11637: Missing Release of Memory after Effective Lifetime

A memory leak in the TFTP service in B&R Automation Runtime versions...

CVE-2020-11644: Improper Output Neutralization for Logs

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

CVE-2020-26604

An issue was discovered in SystemUI on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 October 2020...

CVE-2020-26605: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with Q10.0 and R11.0 Exynos chipsets software. They allow attackers to obtain sensitive information by reading a log. The Samsung ID is SVE-2020-18596 October 2020...

RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...