303 matches found
CVE-2020-25540
ThinkAdmin v6 is affected by a directory traversal vulnerability that allows an unauthorized attacker to read arbitrary files on a remote server. The vulnerability is exploited via a GET request using an encoded parameter . This flaw can lead to unauthorized access to sensitive files, potential r...
CVE-2020-25540: Improper Limitation of a Pathname to a Restricted Directory
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter...
CVE-2020-9527
Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, after 2018-08-09 through 2020, as used by many different vendors in millions of Internet of Things devices, suffers from buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code via...
CVE-2020-9529
Firmware developed by Shenzhen Hichip Vision Technology V6 through V20, as used by many different vendors in millions of Internet of Things devices, suffers from a privilege escalation vulnerability that allows attackers on the local network to reset the device's administrator password. This...
PT-2019-16080
Name of the Vulnerable Software and Affected Versions Netis DL4323 affected versions not specified Description The issue concerns an XSS vulnerability in the pingrtt v6.html file, specifically affecting the Ping6 Diagnostic feature. Recommendations At the moment, there is no information about a...
Improper access control
Insufficient access control in protected memory subsystem for IntelR SGX for 6th, 7th, 8th, 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5, v6 Families; IntelR XeonR E-2100 & E-2200 Processor Families with IntelR Processor Graphics may allow a privileged user t...
2019.2 IPU – Intel® SGX and TXT Advisory
Summary: Potential security vulnerabilities in Intel® Software Guard Extensions SGX and Intel® Trusted Execution Technology TXT may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0123...
PT-2019-4060
Name of the Vulnerable Software and Affected Versions IntelR CoreTM Processor Families versions 6th through 9th IntelR PentiumR Processor J, N, Silver and Gold Series IntelR CeleronR Processor J, N, G3900 and G4900 Series IntelR AtomR Processor A and E3900 Series IntelR XeonR Processor E3-1500 v5...
SUSE SLED12 / SLES12 Security Update : ucode-intel (SUSE-SU-2019:0736-1)
This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...
SUSE SLED15 / SLES15 Security Update : ucode-intel (SUSE-SU-2019:0712-1)
This update for ucode-intel fixes the following issues : Updated to the 20190312 bundle release bsc1129231 New Platforms : AML-Y22 H0 6-8e-9/10 0000009e Core Gen8 Mobile WHL-U W0 6-8e-b/d0 000000a4 Core Gen8 Mobile WHL-U V0 6-8e-d/94 000000b2 Core Gen8 Mobile CFL-S P0 6-9e-c/22 000000a2 Core Gen9...
DEBIAN-CVE-2019-8376
An issue was discovered in Tcpreplay 4.3.1. A NULL pointer dereference occurred in the function getlayer4v6 located at get.c. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary. It allows an attacker to cause a Denial of Service Segmentation fault or possibly have...
PT-2019-18995
Name of the Vulnerable Software and Affected Versions Tcpreplay version 4.3.1 Description The issue is related to a NULL pointer dereference in the get layer4 v6 function, located in the get.c file. This can be triggered by sending a crafted pcap file to the tcpreplay-edit binary, allowing an...
SAMSUNG X7400GX Sync Thru Web Cross Site Scripting
alertXSS.XSSproxy.org URL http://X.X.X.X/sws/swsAlert.sws?popupid=%3CSCRIPT%3Ealert%22XSS%22;%3C/SCRIPT%3E&type=alert&bullet=suc&func=&Nfunc=closePopup'successMsg ','',''&flag=bob@%3CSCRipt%3EalertXSS%3C/scrIPT%3E.XSSproxy.org &frame=&msg=The%20requested%20reports%20will%20be%20printed Parameter...
HPSBHF03586 rev. 1 - DCI Policy Update
Potential Security Impact Information disclosure and escalation of privilege via limited physical presence. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel platforms, starting with Skylake, support a USB 3-based debugging interface a.k.a. Direct...
Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition affect Data Studio, InfoSphere Data Architect, Optim Query Workload Tuner for Linux, UNIX and Windows, and Optim Query Workload Tuner for z/OS (CVE-2016-0466, CVE-2015-7575)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Data Studio, InfoSphere Data Architect, Optim Query Workload Tuner for Linux, UNIX and Windows, and Optim Query Workload Tuner for z/OS. These issues were disclosed as part of the IBM Java SDK...
Wireshark epan/dissectors/packet-openflow_v6.c file denial of service vulnerability
Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in the epan/dissectors/packet-openflowv6.c file in...
UBUNTU-CVE-2018-7327
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflowv6.c had an infinite loop that was addressed by validating property lengths...
DEBIAN-CVE-2018-7327
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-openflowv6.c had an infinite loop that was addressed by validating property lengths...
PT-2018-18030
Name of the Vulnerable Software and Affected Versions Wireshark versions 2.2.0 through 2.2.12 Wireshark versions 2.4.0 through 2.4.4 Description The issue is related to an infinite loop in the epan/dissectors/packet-openflow v6.c file. This was addressed by validating property lengths...