CVE-2019-19215

The CVE concerns BMC Control-M/Agent 7.0.00.000 where a buffer overflow occurs when the On-Do action destination is Mail and the Agent is configured to send mail. The vulnerability is triggered by vectors related to the configured IP address or SMTP server, allowing remote attackers to impact the...

CVE-2019-19216

BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy...

CVE-2019-19216

The CVE-2019-19216 entry concerns BMC Software Control-M/Agent 7.0.00.000. Connected CNVD data states a vulnerability exists in Control-M/Agent 7.0.00.000 that could allow a remote attacker to overwrite sensitive files and possibly execute commands. The NVD entry identifies an Insecure File Copy ...

CVE-2019-19217

CVE-2019-19217 affects BMC Control-M/Agent 7.0.00.000. Described in CNVD-2020-26845 and NVD entry as OS command injection via the TCP protocol used between Control-M/Agent and Control-M/Server; a remote attacker could submit a crafted request to execute arbitrary commands. No remediation details ...

CVE-2019-19217

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection...

CVE-2019-19218

BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage...

CVE-2019-19218

CVE-2019-19218 affects BMC Control-M/Agent 7.0.00.000. Multiple connected sources describe an information disclosure due to insecure password storage in the Control-M/Agent. The CVE details indicate a high-severity exposure (CVSSv3.1 base score 7.5) with network access required and no privileges ...

CVE-2019-19219

BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download...

CVE-2019-19219

CVE-2019-19219 affects BMC Control-M/Agent 7.0.00.000. The CNVD entry describes a vulnerability in Control-M/Agent–Control-M/Server communication over TCP that lets remote attackers submit a special request to download arbitrary files. The NVD entry similarly states Arbitrary File Download. No re...

CVE-2019-19220

BMC Control-M/Agent 7.0.00.000 allows OS Command Injection issue 2 of 2...

CVE-2020-8472

Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M versions 6.0 and earlier and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl version 6.1 and earlier allow low privileged users to read, modify, add and...

CVE-2020-8472

CVE-2020-8472 affects ABB System 800xA components: OPCServer for AC800M (v6.0 and earlier), Control Builder M Professional, MMS Server for AC800M, and Base Software for SoftControl (v6.1 and earlier). Root cause is insufficient/weak default folder permissions (CWE-276) allowing low-privileged use...

m-zone.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1152237 Security Researcher Papix2020 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges Received 2 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-zone.pl website and its...

l-m-r.se Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149893 Security Researcher m00nr4c00n Helped patch 192 vulnerabilities Received 2 Coordinated Disclosure badges Received 2 recommendations , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting l-m-r.se website and its...

CVE-2020-7487

The CVE-2020-7487 entry concerns Schneider Electric Modicon M218, M241, M251, and M258 controllers affected by CWE-345: Insufficient Verification of Data Authenticity. The Red Hat/NVD-related and Tenable/NASL data in connected documents corroborate that this is a data-authenticity issue allowing ...

WordPress M-Shield plugin - Fake plugin/backdoor

Fake plugin/backdoor discovered by Sucuri under the name M-Shield. Solution Delete asap + look up for possible additional malicious files on the server...

M-Shield & kingof - Fake Malware Backdoor Plugins

Sucuri Labs found that the M-Shield & kingof fake WordPress plugins were used as malware droppers, with the initial compromise likely coming from another legitimate vulnerable WordPress plugin security vulnerability...

m-poweredmedia.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144449 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-poweredmedia.com website...

m-trade.pro Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141402 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-trade.pro website and it...

m-ansari.ir Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141053 Security Researcher geeknik Helped patch 8899 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting m-ansari.ir website and it...