3728 matches found
ALPINE-CVE-2020-15566
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channel port may fail for multiple reasons: 1 port is already in use, 2 the memory allocation failed, or...
Fedora 31 : tcpreplay (2020-256ac53cc7)
This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...
Fedora 32 : tcpreplay (2020-f47830961a)
This release contains bug fixes only which includes security fixes : - Increase cache buffers size to accomodate VLAN edits 594 - Correct L2 header length to correct IP header offset 583 - Fix warnings from gcc version 10 580 - Heap Buffer Overflow in randomizeiparp 579 - Use after free in...
DEBIAN-CVE-2020-14152
In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...
UBUNTU-CVE-2020-14152
In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...
max-followers.com Cross Site Scripting vulnerability OBB-1194221
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
curl: Poll loop/hang on incomplete HTTP header
Summary: When an incomplete server header is missing its value, the curl client will receive the packet but hang while parsing it. Examples of vulnerable server headers: Location, Content-Range and Connection. Adding the --max-timeoption will terminate the request as intended. Steps To Reproduce:...
max-agency.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1169444 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
max-effect.su Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1162531 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
max-stone.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1160277 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
PT-2020-23056
This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter user input under in the scenario when a webform is edited, namely the message related to character min/max counter does not undergo sufficient filtering and thus allows execution of JavaScript cod...
Git-Hound v1.1 - GitHound Pinpoints Exposed API Keys On GitHub Using Pattern Matching, Commit History Searching, And A Unique Result Scoring System
A batch-catching, pattern-matching, patch-attacking secret snatcher. GitHound pinpoints exposed API keys and other sensitive information on GitHub using pattern matching, commit history searching, and a unique result scoring system. GitHound has earned me over $7500 applied to Bug Bounty research...
Intel MAX 10 FPGA Information Disclosure Vulnerability
Intel MAX 10 FPGA is a specialized integrated circuit development board from Intel Corporation. An information disclosure vulnerability exists in the Intel MAX 10 FPGA that arises from a misconfiguration in the block design. The vulnerability can be exploited by an attacker to elevate privileges...
CVE-2020-0574
Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...
Design/Logic Flaw
Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...
CVE-2020-0574
Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...
CVE-2020-0574
CVE-2020-0574 : A misconfiguration in the block design of Intel® MAX® 10 FPGA (all versions) may allow an authenticated user to escalate privileges and disclose information via physical access. The issue is documented by Intel (Intel® MAX® 10 FPGA Advisory) with a CVSS v3.1 base score of 5.9 (MED...
CVE-2020-0574: Undefined Security Weakness
Improper configuration in block design for IntelR MAXR 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access...
Intel® MAX® 10 FPGA Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00349.html...
PT-2020-4014
Name of the Vulnerable Software and Affected Versions: IntelR MAXR 10 FPGA affected versions not specified Description: The issue is related to improper configuration in block design, which may allow an authenticated user to potentially enable escalation of privilege and information disclosure vi...