10971 matches found
Unspecified Vulnerability in Schneider Electric Easergy T300
Easergy T300 is a new generation intelligent terminal for distribution network automation, which is designed with the concept of "Modularity, Flexibility, and Application Oriented", and can be widely used in medium voltage distribution network management, fault location, isolation, and restoratio...
Unspecified Vulnerability in Schneider Electric Easergy T300 (CNVD-2021-19762)
Easergy T300 is a new generation of intelligent terminals for distribution network automation, adhering to the design concepts of "modularity, flexibility, and application orientation", which can be widely used in medium-voltage distribution network management, fault location, isolation, and...
Privilege Escalation and Information Disclosure Vulnerabilities in SMG
Summary Symantec Messaging Gateway SMG is susceptible to privilege escalation and information disclosure vulnerabilities. A malicious, authenticated, privileged user can further elevate their privileges on the system, or obtain a password for a remote SCP backup server that they might not otherwi...
Schneider Electric Easergy T300 安全漏洞
Easergy T300 is a new generation of intelligent terminals for distribution network automation, adhering to the design concepts of "modularity, flexibility, and application orientation", which can be widely used in medium-voltage distribution network management, fault location, isolation, and...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 8 security fixes, including: 1142331 High CVE-2020-16037: Use after free in clipboard. Reported by Ryoya Tsukasaki on 2020-10-26 1138683 High CVE-2020-16038: Use after free in media. Reported by Khalil Zhani on 2020-10-14 1149177 High CVE-2020-16039:...
serenity:FuzzPNGLoader: Heap-buffer-overflow in decode
Detailed Report: https://oss-fuzz.com/testcase?key=5636989654925312 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzPNGLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000000112 Crash State: decode dynamic puff Sanitizer: addre...
serenity:FuzzRegexPosixExtended: Heap-buffer-overflow in regex::Lexer::back
Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5077400093982720 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzRegexPosixExtended Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...
Vtiger CRM 7.0 Cross Site Scripting
Document Title: =============== VTiger v7.0 CRM - To Persistent Email Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2227 Release Date: ============= 2020-11-18 Vulnerability Laboratory ID VL-ID: ==================================== 2227...
USN-4581-1: Python vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection. CVEs...
Froxlor 0.10.16 Cross Site Scripting
Document Title: =============== Froxlor v0.10.16 CP - Customer Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2241 Release Date: ============= 2020-11-12 Vulnerability Laboratory ID VL-ID: ====================================...
Intel® PMC Advisory - Lenovo Support US
No description provided...
Intel® Unite Client for Windows Advisory - Lenovo Support US
No description provided...
Intel CSI2 Host Controller Advisory - Lenovo Support US
No description provided...
Bumble: Possible (we need to wait for some time) takeover of subdomain badootech.badoo.com which is pointing to Medium servers
Description: Hello, team! Recently I found a new subdomain pushed; it's https://badootech.badoo.com/. The site's content contains a Medium icon with the text "Oops! We couldn’t find that page. Sorry about that.", DNS records are: badootech.badoo.com. 21399 IN A 52.1.173.203 badootech.badoo.com...
Live Webinar: Reducing Complexity by Increasing Consolidation for SMEs
Complexity is the bane of effective cybersecurity. The need to maintain an increasing array of cybersecurity tools to protect organizations from an expanding set of cyber threats is leading to runaway costs, staff inefficiencies, and suboptimal threat response. Small to medium-sized enterprises...
Intel CSI2 Host Controller Advisory
Summary: A potential security vulnerability in the Intel Camera Serial Interface CSI 2 Host Controller driver may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0573 Description: Out of bounds read...
Deception Technology: No Longer Only A Fortune 2000 Solution
A cyber-attacker successfully breaks into your environment and begins sneaking around to find something valuable - intellectual property, bank account credentials, company plans, whatever. The attacker makes his way to a certain host on a network node to browse the directories, and suddenly, his...
Intel RAPL Interface Advisory - Lenovo Support US
No description provided...
Intel RAPL Interface Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41208 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8694, CVE-2020-8695 Summary Description: Intel reported potential security vulnerabilities in the Intel® Running Average Power Limit RAPL Interface...
libreoffice:fodtfuzzer: Heap-buffer-overflow in std::__1::unique_ptr<SwXMLTableRow_Impl, std::__1::default_delete<SwXMLTableRow_
Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5196181338324992 Project: libreoffice Fuzzing Engine: afl Fuzz Target: fodtfuzzer Job Type: aflasanlibreoffice Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...