CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

Buffer overflow

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

CVE-2020-29659

A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...

CVE-2020-29659

CVE-2020-29659 affects Flexense DupScout Enterprise 10.0.18, where a buffer overflow in the web server allows remote, unauthenticated code execution as SYSTEM by overflowing the sid parameter through GET /settings&sid=. The issue stems from improper handling of the sid parameter in the web server...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:3036-1)

This update for rmt-server fixes the following issues : Update to version 2.6.5: Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. Add web server settings to /etc/rmt.conf: Now it's possible...

Flexense DupScout Enterprise Buffer Error Vulnerability

Flexense DupScout Enterprise is a duplicate file finder from the Israeli company Flexense. The software supports searching and removing duplicate files from local disks, network shares, NAS storage devices, and enterprise storage systems, and can search for duplicate files, save reports, replace...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:3147-1)

This update for rmt-server fixes the following issues : Version 2.6.5 Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. Version 2.6.4 Add web server settings to /etc/rmt.conf: Now it's...

SUSE SLES15 Security Update : rmt-server (SUSE-SU-2020:3160-1)

This update for rmt-server fixes the following issues : Version 2.6.5 Solved potential bug of SCC repository URLs changing over time. RMT now self heals by removing the previous invalid repository and creating the correct one. Version 2.6.4 Add web server settings to /etc/rmt.conf: Now it's...

PT-2020-6376 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to the lack of authentication for a...

PT-2020-5606 · Siemens · Sicam A8000 Cp-8000 +2

Name of the Vulnerable Software and Affected Versions: SICAM A8000 CP-8000 versions prior to V16 SICAM A8000 CP-8021 versions prior to V16 SICAM A8000 CP-8022 versions prior to V16 Description: A web server misconfiguration in the affected devices can cause insecure ciphers usage by a user's...

PT-2020-6371 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to insufficient checking of unusual or exceptional conditions in the software of programmable logic controllers. This could allow...

phpMyAdmin 4.0.x < 4.0.10.15 / 4.4.x < 4.4.15.5 / 4.5.x < 4.5.5.1 Multiple Vulnerabilities

According to its self-reported version, the phpMyAdmin application hosted on the remote web server is 4.0.x prior to 4.0.10.15, 4.4.x prior to 4.4.15.5, or 4.5.x prior to 4.5.5.1. It is, therefore, affected by multiple vulnerabilities. - Cross-site scripting XSS vulnerability in the format functi...

APISIX Admin API default access token RCE

Apache APISIX has a default, built-in API token edd1c9f034335f136f87ad84b625c8f1 that can be used to access all of the admin API, which leads to remote LUA code execution through the script parameter added in the 2.x version. This module also leverages another vulnerability to bypass the IP...

PT-2020-16801 · Unknown +1 · Http Server +1

Name of the Vulnerable Software and Affected Versions: HTTP Server affected versions not specified Description: The issue is related to an integer overflow vulnerability in the length of websocket frames received via a websocket connection. This flaw can be exploited by an attacker to cause a...

YoudianCMS suffers from a file upload vulnerability (CNVD-2020-70584)

Youdiancms Enterprise Website Management System is an enterprise website building system developed by Changsha Youdian Software Technology Co. YoudianCMS has a file upload vulnerability that can be exploited by attackers to gain administrative privileges on the web server...

Design/Logic Flaw

A CWE-255: Credentials Management vulnerability exists in Web Server on Modicon M340, Modicon Quantum and ModiconPremium Legacy offers and their Communication Modules see security notification for version information which could cause the execution of commands on the webserver without...

CVE-2020-7533

CVE-2020-7533 is a credential management/improper authentication issue affecting Schneider Electric Modicon Web Server components on M340, Quantum, and Premium Legacy offers, plus their Communication Modules. The vulnerability could allow an unauthenticated attacker to cause the web server to exe...

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...

httpd: mod_proxy_uwsgi buffer overflow

A flaw was found in Apache httpd in versions 2.4.32 to 2.4.46. The uwsgi protocol does not serialize more than 16K of HTTP header leading to resource exhaustion and denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabilit...