fx-more.com Cross Site Scripting vulnerability OBB-2570006

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-1961 · Cisco · Cisco Fxos +2

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software and Cisco NX-OS Software affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol service could allow an unauthenticated, adjacent attacker to cause the service to restart, resulting in ...

PT-2022-12649

Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description The issue is related to a NULL pointer dereference in the fx Function prototype hasInstance component. Recommendations For Moddable SDK version 11.5.0, at the moment, there is no information about a newe...

PT-2022-12644

Name of the Vulnerable Software and Affected Versions Moddable SDK version 11.5.0 Description The issue is related to a SEGV vulnerability found in the Moddable SDK. It occurs via xs/sources/xsDataView.c in fx ArrayBuffer prototype concat. Recommendations For Moddable SDK version 11.5.0, consider...

PT-2021-18172

Name of the Vulnerable Software and Affected Versions: Moddable version 10.5.0 Description: A heap buffer overflow was discovered in the fx ArrayBuffer function at /moddable/xs/sources/xsDataView.c. This issue affects the Moddable software. Recommendations: For Moddable version 10.5.0, consider...

PT-2021-18170

Name of the Vulnerable Software and Affected Versions: OpenSource Moddable version 10.5.0 Description: A heap buffer overflow was discovered in the fx String prototype repeat function at /moddable/xs/sources/xsString.c. This issue affects the specified version of OpenSource Moddable...

AMD Chipset Driver Information Disclosure Vulnerability

Bulletin ID: AMD-SB-1009 Potential Impact: Information Disclosure Severity: Medium Summary Low privileged malicious users may be able to access and leak data through the AMD Chipset Driver. CVE Details CVE-2021-26333 Insufficient access controls in the AMD Link Android app may potentially result ...

fx-blog.jp Cross Site Scripting vulnerability OBB-2172742

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-31538

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-31538

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-31538

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-31538

CVE-2021-31538 affects LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5. The vulnerability is a Relative Path Traversal in LCOS FX 10.5 where input is not properly filtered for path traversal sequences, potentially allowing access outside of restricted directories. Affected product f...

CVE-2021-31538: Improper Limitation of a Pathname to a Restricted Directory

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

Code injection

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...

CVE-2021-27187

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked...

CVE-2021-27188

The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account...