UBUNTU-CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

The vulnerability of the microprogramming software for Desigo PX arises from incorrect verification of input data by the PX Web service (port TCP/80). This allows a perpetrator to trigger a service failure.

The vulnerability of the microprogramming software for Desigo PX is related to incorrect verification of input data by the PX Web service port TCP/80. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2019-19967

The Administration page on Connect Box EuroDOCSIS 3.0 Voice Gateway CH7465LG-NCIP-6.12.18.25-2p6-NOSH devices accepts a cleartext password in a POST request on port 80, as demonstrated by the Password field to the xml/setter.xml URI...

CVE-2019-18335

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an...

Siemens SPPA-T3000 Information Disclosure Vulnerability

The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. An information disclosure vulnerability exists in the Siemens SPPA-T3000. An attacker can exploit the vulnerability to access logs and configuration files by sending careful...

TP-Link TL-WR841N Buffer Overflow Vulnerability

The TP-Link TL-WR841N is a wireless router from China P&L TP-Link. A buffer overflow vulnerability exists in the web service listening on TCP port 80 by default in the TP-LINK TL-WR841N. The vulnerability originates when a network system or product performs an operation on memory without properly...

Denial of Service Vulnerability in ZLAN5102 and ZLAN5103 NICs

ZLAN5102 serial server is a protocol converter between RS232/485 and TCP/IP developed by Shanghai Zoran Information Technology Co. This serial server can easily connect serial devices to Ethernet and Internet, and realize the network upgrade of serial devices.ZLAN5103 is a new generation of...

The multiple vulnerabilities of Check Point Security Gateway firewalls models series 80, 600, and 1000 involve deficiencies in access control. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The multiple vulnerabilities of Check Point Security Gateway Series 80, 600, and 1000 are related to deficiencies in access control for certain functions. Exploitation of these vulnerabilities could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protect...

cPanel cross-site scripting vulnerability (CNVD-2019-34458)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the LiveAPI sample script in versions prior to cPanel 82.0.15. The vulnerability...

PT-2019-13272 · Dbell · Dbell Wi-Fi Smart Video Doorbell Db01-S

Name of the Vulnerable Software and Affected Versions: dbell Wi-Fi Smart Video Doorbell DB01-S version Gen 1 Description: The issue allows remote attackers to launch commands with no authentication verification via TCP port 81. This is because the loginuse and loginpass parameters to "openlock.cg...

nodejs: Denial of Service with large HTTP headers

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers almost 80 KB per connection, and carefully timed completion of the headers, it is possible to cause the HTTP...

Schneider Electric Modicon M580 Denial of Service Vulnerability

The Schneider Electric Modicon M580 is a programmable automation controller from Schneider Electric, France. A security vulnerability exists in the Schneider Electric Modicon M580 using firmware versions prior to V2.80. An attacker could exploit this vulnerability to cause a denial of service...

Schneider Electric Modicon M340 and Modicon M580 Denial of Service Vulnerability

The Schneider Electric Modicon M580 and Schneider Electric Modicon M340 are both products of the French company Schneider Electric.The Schneider Electric Modicon M580 is a programmable automation The Schneider Electric Modicon M580 is a programmable automation controller, and the Schneider Electr...

CVE-2019-6830

A CWE-248: Uncaught Exception vulnerability exists IN Modicon M580 all versions prior to V2.80, which could cause a possible denial of service when sending an appropriately timed HTTP request to the controller...

Schneider Electric Modicon M340 PLC Has Denial of Service Vulnerability

Schneider Electric Modicon M340 is a medium-sized PLC from Schneider Electric, which has a wide range of applications in the industrial control field in China. A denial of service vulnerability exists in the Schneider Electric Modicon M340 PLC. The vulnerability can be exploited to cause a denial...

nodejs: Denial of Service with large HTTP headers

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers almost 80 KB per connection, and carefully timed completion of the headers, it is possible to cause the HTTP...

cPanel Information Disclosure Vulnerability (CNVD-2019-26330)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in cPanel versions prior to 80.0.5. The vulnerability stems from a configuration o...

Private Internet Access (PIA) VPN Client Arbitrary File Overwrite Vulnerability

Private Internet Access PIA is a commercial VPN service operated by London Trust Media. An arbitrary file overwrite vulnerability exists in the London Trust Media Private Internet Access PIA VPN client version 82 for Linux and macOS. An attacker can exploit this vulnerability to overwrite any fil...

Private Internet Access (PIA) VPN Client Arbitrary Code Execution Vulnerability (CNVD-2019-24217)

Private Internet Access PIA is a commercial VPN service operated by London Trust Media. An arbitrary code execution vulnerability exists in the London Trust Media Private Internet Access PIA VPN client for Linux, version 82. An attacker can exploit this vulnerability by creating a malicious libra...

Private Internet Access (PIA) VPN Client Arbitrary Code Execution Vulnerability (CNVD-2019-24214)

Private Internet Access PIA is a commercial VPN service operated by London Trust Media. An arbitrary code execution vulnerability exists in the London Trust Media Private Internet Access PIA VPN client for Linux, version 82. An attacker can exploit this vulnerability by passing a malicious...