19008 matches found
PT-2020-3705 · Microsoft · Windows Codecs Library
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Description: A remote code execution issue exists in the way Microsoft Windows Codecs Library handles objects in memory. This could allow an attacker to take control of the...
PT-2020-13263 · Comodo +1 · Itop +1
Name of the Vulnerable Software and Affected Versions: Combodo iTop affected versions not specified Description: The issue is related to a cross-site request forgery CSRF vulnerability. This means that attackers can execute specific commands by forging requests from a malicious site...
Tridium Niagra Unspecified Vulnerability
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network. File data ot500378.nasl...
Tridium Niagra Unspecified Vulnerability
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication. File data ot500376.nasl...
Tridium Niagra Unspecified Vulnerability
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file. File data ot500375.nasl...
Unspecified Vulnerability in JetBrains TeamCity
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in versions of...
PT-2020-3933 · Microsoft · Windows Dns +1
Name of the Vulnerable Software and Affected Versions: Windows DNS affected versions not specified Description: A denial of service issue exists due to improper handling of queries. An authenticated attacker can exploit this by sending malicious DNS queries, causing the DNS service to become...
PT-2020-3935 · Microsoft · Windows Modules Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Modules Installer affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of objects in memory by Windows Modules Installer. This could allow an attacker to run arbitrary code i...
CVE-2020-16167
Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls intended for another temi user. Answering the call this way grants motor control of the temi in addition to audio/video via unspecified...
Authentication flaw
Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls intended for another temi user. Answering the call this way grants motor control of the temi in addition to audio/video via unspecified...
CVE-2020-16168
Origin Validation Error in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to access the REST API and MQTT broker used by the temi and send it custom data/requests via unspecified vectors...
Security Bulletin: There are vulnerabilities in the IBM® Java Runtime Environment™ used by DB2 Recovery Expert for Linux, Unix and Windows
Summary An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to take control of the system. An unspecified vulnerability in multiple Oracle products could allow an unauthenticated attacker to take control of the system. An...
CVE-2016-5344
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11.
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Integration Bus & IBM App Connect Enterprise v11. These issues were disclosed as part of the IBM Java SDK updates in April 2020. Vulnerability Details CVEID: CVE-2020-2800 DESCRIPTION: An unspecified...
CVE-2020-5615
Cross-site request forgery CSRF vulnerability in Calendar01 free edition ver1.0.0 and Calendar02 free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2020-5616
Calendar01, Calendar02, PKOBO-News01, PKOBO-vote01, Telop01, Gallery01, CalendarForm01, and Link01 Calendar01 free edition ver1.0.0, Calendar02 free edition ver1.0.0, PKOBO-News01 free edition ver1.0.3 and earlier, PKOBO-vote01 free edition ver1.0.1 and earlier, Telop01 free edition ver1.0.0,...
Authentication flaw
Calendar01, Calendar02, PKOBO-News01, PKOBO-vote01, Telop01, Gallery01, CalendarForm01, and Link01 Calendar01 free edition ver1.0.0, Calendar02 free edition ver1.0.0, PKOBO-News01 free edition ver1.0.3 and earlier, PKOBO-vote01 free edition ver1.0.1 and earlier, Telop01 free edition ver1.0.0,...
CVE-2020-5610
Global TechStream GTS for TOYOTA dealers version 15.10.032 and earlier allows an attacker to cause a denial-of-service DoS condition and execute arbitrary code via unspecified vectors...