Debian DSA-4883-1 : underscore - security update

It was discovered that missing input sanitising in the template function of the Underscore JavaScript library could result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Weak Password Vulnerability in USG2130 at P&L Technologies Ltd.

The TL-ER2220G is a dual-core, multi-WAN port Gigabit enterprise VPN router from P&L Technologies. A weak password vulnerability exists in USG2130 of P&L Technology Limited, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in TL-ER6229GPE-AC of P&L Technologies Ltd.

The TL-ER6229GPE-AC is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER6229GPE-AC, which can be exploited by an attacker to cause a denial of service by sending a carefully constructed packet...

HPESBNS04076 rev.1 - HPE Web ViewPoint Suite, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Disclosure of Sensitive Information, Unauthorized Access to Sensitive Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint Enterprise T0986 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint T0320 ...

Denial of Service Vulnerability in TL-ER5520G of P&L Technologies Ltd.

The TL-ER5520G is a gigabit router. A denial of service vulnerability exists in the P&L Technologies TL-ER5520G, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-ER6110G of P&L Technologies Ltd.

"TP-LINK" is a leading global supplier of network communication equipment. A denial of service vulnerability exists in the TL-ER6110G, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in TL-ER7520G of P&L Technologies Ltd.

TL-ER7520G is a new generation of full gigabit enterprise router product. A denial-of-service vulnerability exists in the TL-ER7520G from P&L Technologies, which can be exploited by attackers to cause a denial of service...

CVE-2020-5675

Out-of-bounds read vulnerability in GT21 model of GOT2000 series GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier, GS21 model of GOT series GS2110-WTBD V01.39.000...

Design/Logic Flaw

Out-of-bounds read vulnerability in GT21 model of GOT2000 series GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT2104-RTBD V01.39.000 and earlier, GT2104-PMBD V01.39.000 and earlier, and GT2103-PMBD V01.39.000 and earlier, GS21 model of GOT series GS2110-WTBD V01.39.000...

Denial of Service Vulnerability in MITSUBISHI FX3U-ENET-L

FX3U-ENET-L has 4 communication channels. Mitsubishi PLC Ethernet Module FX3U-ENET-L supports fixed buffer storage area communication, connection to MELSOFT, communication via MC series, and e-mail delivery. When connecting to MELSOFT, remote maintenance of PLC programs can be realized through GX...

Denial of Service Vulnerability in MITSUBISHI FX3U-ENET-L (CNVD-2020-70577)

FX3U-ENET-L has 4 communication channels. Mitsubishi PLC Ethernet Module FX3U-ENET-L supports fixed buffer storage area communication, connection to MELSOFT, communication via MC series, and e-mail delivery. When connecting to MELSOFT, remote maintenance of PLC programs can be realized through GX...

Wsb-Detect - Tool To Detect If You Are Running In Windows Sandbox ("WSB")

wsb-detect enables you to detect if you are running in Windows Sandbox "WSB". The sandbox is used by Windows Defender for dynamic analysis, and commonly manually by security analysts and alike. At the tail end of 2019, Microsoft introduced a new feature named Windows Sandbox WSB for short. The...

GHSA-MW36-7C6C-Q4Q2 XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

XStream can be used for Remote Code Execution

Impact The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Patches If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.14. Workarounds No user is affected, who...

e-l-f.be Improper Access Control vulnerability OBB-1493930

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...

CVE-2020-5652

Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...

CVE-2020-5652

The CVE-2020-5652 vulnerability affects Mitsubishi Electric MELSEC iQ-R, Q, and L Series CPU modules. A specially crafted Ethernet packet can cause uncontrolled resource consumption, stopping Ethernet communications and leading to a DoS. Affected products include iQ-R CPUs (R00, R01, R02, R04 EN,...

PT-2020-18619 · Mitsubishi · Melsec Q03 Udecpu +11

Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series CPU modules versions '20' and earlier MELSEC Q series CPU modules versions '52' and earlier MELSEC L series CPU modules versions with serial number '22081' and earlier MELSEC iQ-R R 04/08/16/32/120 EN CPU firmware versions...

v-l-m.org Cross Site Scripting vulnerability OBB-1464037

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...