9218 matches found
CVE-2020-8745
CVE-2020-8745 is a vulnerability in Intel CSME/TXE subsystems with insufficient control flow management in the subsystem, affecting Intel CSME/AMT/SPS firmware before specific versions (e.g., 11.8.x/11.12.x/11.22.x/12.0.x/13.0.x/14.x branches and TXE before 3.1.80 and 4.0.30). The issue could all...
CVE-2020-8745
Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , IntelR TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physica...
CVE-2020-12310
Insufficient control flow managementin firmware in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2020-12310
The CVE-2020-12310 entry is supported by connected documents: Intel’s advisory (INTEL-SA-00362) details a vulnerability in firmware of multiple Intel SSD lines where insufficient control flow management could allow information disclosure via physical access, unauthenticated. The CVE is listed in ...
CVE-2020-8751: Undefined Security Weakness
Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, IntelR TXE versions before 3.1.80 may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2020-8745: Undefined Security Weakness
Insufficient control flow management in subsystem for IntelR CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25 , IntelR TXE versions before 3.1.80 and 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physica...
CVE-2020-12310: Undefined Security Weakness
Insufficient control flow managementin firmware in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2020-12311: Undefined Security Weakness
Insufficient control flow managementin firmware in some IntelR Client SSDs and some IntelR Data Center SSDs may allow an unauthenticated user to potentially enable information disclosure via physical access...
Pegasystem Pega Platform Cross-Site Scripting Vulnerability (CNVD-2020-63481)
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...
PT-2020-4859
Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine CSME versions prior to 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45, and 14.5.25 Intel Trusted Execution Engine TXE versions prior to 3.1.80 and 4.0.30 Description: The iss...
PT-2020-4733
Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.80 IntelR TXE versions prior to 3.1.80 Description: The issue is related to insufficient control flow management in the subsystem for IntelR CSME and IntelR TXE, which may allow an unauthenticated user to...
Open WebRTC Toolkit Advisory
Summary: A potential security vulnerability in the Open WebRTC Toolkit may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12338 Description: Insufficient control flow management in the Open WebRTC...
floridacashflowproperties.com Cross Site Scripting vulnerability OBB-1488626
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
OAuth session fixation vulnerability in Mozilla VPN — Mozilla
An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as that user. This issue is limited to cases where attacker and victim are sharing the same source IP...
GHSA-58R4-H6V8-JCVM Regression in JWT Signature Validation
Overview Versions after and including 2.3.0 are improperly validating the JWT token signature when using the JWTValidator.verify method. Improper validation of the JWT token signature when not using the default Authorization Code Flow can allow an attacker to bypass authentication and...
CVE-2020-27978
Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in the Java Servlet container session...
PT-2020-16885
Name of the Vulnerable Software and Affected Versions Shibboleth Identify Provider versions prior to 3.4.6 Description The issue is a denial of service flaw that allows a remote unauthenticated attacker to cause a login flow to trigger Java heap exhaustion. This occurs due to the creation of...
Flow Number Error Vulnerability
Flow is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in Flow's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
CVE-2020-3564
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...
CVE-2020-3564
A vulnerability in the FTP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass FTP inspection. The vulnerability is due to ineffective flow tracking of FTP traffic. An attacke...