658 matches found
B&R Industrial Automation APROL Injection Vulnerability
B&r Automation B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation, Australia. An injection vulnerability exists in B&R Industrial Automation APROL versions prior to R4.2 V7.08, which can be exploited to inject and execute arbitrary...
B&r Automation APROL Authorization Issues Vulnerability
B&r Automation APROL is a Linux-based process control system for industrial control applications from Australian company B&r Automation. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to access...
libvpx security update
1.7.0-8 - Resolves: rhbz1796086, rhbz1796100, rhbz1796448, rhbz1796454 - Enable webm-io explicitly 1.7.0-7 - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126 - Resolves: rhbz1796086, rhbz1796100, rhbz1796448, rhbz1796454 - Remove php-cli BR...
br-hana.kr Cross Site Scripting vulnerability OBB-1396430
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
licitacao.ac.gov.br Cross Site Scripting vulnerability OBB-1368160
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
New Unpatched Bluetooth Flaw Lets Hackers Easily Target Nearby Devices
Bluetooth SIG—an organization that oversees the development of Bluetooth standards—today issued a statement informing users and vendors of a newly reported unpatched vulnerability that potentially affects hundreds of millions of devices worldwide. Discovered independently by two separate teams of...
CVE-2020-14292
In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...
biblioteca.cep.g12.br Cross Site Scripting vulnerability OBB-1284597
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
camaraicem.sp.gov.br Cross Site Scripting vulnerability OBB-1240784
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
tvu.ufrn.br Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1168790 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2020-10135
The CVE-2020-10135 entry describes a vulnerability in Bluetooth BR/EDR authentication where legacy pairing and secure-connections pairing for Core Specification v5.2 and earlier may allow an unauthenticated, adjacent attacker to complete the authentication procedure without requiring pairing cred...
Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacks
Overview Bluetooth Low Energy BLE and Basic Rate / Enhanced Data Rate BR/EDR Core Configurations are used for low-power short-range communications. To establish an encrypted connection, two Bluetooth devices must pair with each other using an agreed upon Association Model. It is possible for an...
CVE-2019-19101
A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...
CVE-2019-19102
A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...
RHEL 7 : kernel (RHSA-2020:1460)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1460 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hardware: bluetooth: BR/EDR encryption key...
Debian: Security Advisory (DSA-4585-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
br-performance.re Cross Site Scripting vulnerability
Security Researcher devl00p Helped patch 2581 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting br-performance.re website and its users. Following...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0222)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an...
SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2019:2879-1)
The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2017-18595: A double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c bnc1149555. CVE-2019-14821: An out-of-bounds acce...
RHEL 7 : kernel (RHSA-2019:3218)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3218 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hardware: bluetooth: BR/EDR encryption key...