2242 matches found
Oracle Fusion Middleware Oracle HTTP Server (Oct 2020 CPU)
The version of Oracle HTTP Server installed on the remote host is affected by the following vulnerabilities as referenced in the October 2020 CPU advisory: - A denial of service DoS vulnerability exists in the SSL Module OpenSSL. An unauthenticated, remote attacker with network access via HTTPS,...
CVE-2020-24990
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
Directory traversal
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
CVE-2020-24990
The CVE-2020-24990 issue affects QSC Q-SYS Core Manager 8.2.1 via the TFTP service on UDP/69, enabling a directory traversal to read OS files (e.g., /etc/passwd, /proc/version). Root cause: TFTP GET requests bypass path filtering. Impact is partial confidentiality loss without integrity/availabil...
CVE-2020-24990
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
CVE-2020-26130
Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...
CVE-2020-26130
Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...
Design/Logic Flaw
Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...
CVE-2020-26130
Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...
CVE-2020-26130
CVE-2020-26130 affects Open TFTP Server 1.66 in both multithreaded and single-port builds. The root cause is insufficient access restrictions in the default installation directory, enabling privilege escalation by replacing the OpenTFTPServerMT.exe (multithreaded) or OpenTFTPServerSP.exe (single-...
PT-2020-16304 · Multithreaded Studios · Open Tftp Server
Name of the Vulnerable Software and Affected Versions: Open TFTP Server multithreaded version 1.66 Open TFTP Server single port version 1.66 Description: The issue is related to insufficient access restrictions in the default installation directory of Open TFTP Server, allowing an attacker to...
CVE-2020-12504
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an acti...
Authorization
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an acti...
CVE-2020-12504 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below has an acti...
CVE-2020-12504
CVE-2020-12504 is an "Improper Authorization" vulnerability affecting Pepperl+Fuchs/P+F Comtrol RocketLinx devices and Korenix JetNet/JetWave products listed in the connected documents. The NVD entry notes an active TFTP service on affected models (firmware 1.2.3 and below for some Pepperl+Fuchs/...
CVE-2020-11637
A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...
CVE-2020-11637
A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...
Race condition
A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...
CVE-2020-11637 Automation Runtime TFTP Service DoS Vulnerability
A memory leak in the TFTP service in B&R Automation Runtime versions N4.26, N4.34, F4.45, E4.53, D4.63, A4.73 and prior could allow an unauthenticated attacker with network access to cause a denial of service DoS condition...