Linux kernel resource management error vulnerability (CNVD-2020-41820)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files,...

Schneider Electric Vijeo Designer Basic and Vijeo Designer Code Issue Vulnerability

Schneider Electric Vijeo Designer Basic is a suite of programming and design software for HMIs Human Machine Interfaces from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Vijeo Designer Basic 1.1 HotFix 15 and earlier and Vijeo Designer 6.9 SP9 and earlier. T...

Eaton HMiSoft VU3 Buffer Overflow Vulnerability

Eaton HMiSoft VU3 is a set of HMI programming software from Eaton Corporation. A buffer overflow vulnerability exists in Eaton HMiSoft VU3. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

class-transformer input validation error vulnerability

class-transformer is a package that can transform/serialize/deserialize JavaScript objects to class constructors. An input validation error vulnerability exists in class-transformer. The vulnerability stems from a networked system or product that does not properly validate input data. No details ...

Xfig fig2dev Input Validation Error Vulnerability

Xfig fig2dev is a tool for printing and exporting .fig format files. An input validation error vulnerability exists in the 'makearrow' function of the arrow.c file in Xfig fig2dev version 3.2.7b. The vulnerability stems from a networked system or product that does not properly validate input data...

Osmand Code Issue Vulnerability

Osmand is a mapping and navigation application for mobile platforms. A code issue vulnerability exists in Osmand 2.0.0 and prior versions. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detailed vulnerability detai...

Buildah Path Traversal Vulnerability

Buildah is a tool that supports building OCI container images. A path traversal vulnerability exists in Buildah. The vulnerability stems from a failure of a networked system or product to properly filter for special elements in a resource or file path. An attacker could use this vulnerability to...

EasyBuild Log Information Disclosure Vulnerability

EasyBuild is a software building and installation framework. A log information disclosure vulnerability exists in versions of EasyBuild prior to 4.1.2. The vulnerability stems from the abnormal output of log files from a networked system or product. No details of the vulnerability are provided at...

Aquaforest TIFF Server Information Disclosure Vulnerability

Aquaforest TIFF Server is a TIFF Tagged Image File Format server from Aquaforest UK. An information disclosure vulnerability exists in Aquaforest TIFF Server version 4.0. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An...

ASUSTOR exFAT Driver Trust Management Issues Vulnerability

ASUSTOR exFAT Driver is an exFAT file system driver from Taiwan, China ASUSTOR. A trust management issue vulnerability exists in ASUSTOR exFAT Driver 1.0.0.r20 and prior versions. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An...

BECKHOFF Ethernet TCP/IP Bus Coupler BK9000 Resource Management Error Vulnerability

The Beckhoff Ethernet TCP/IP Bus Coupler BK9000 is an Ethernet TCP/IP bus coupler from Beckhoff Germany. A resource management error vulnerability exists in the BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. The vulnerability arises from mismanagement of system resources e.g., memory, disk space,...

utilitify input validation error vulnerability

utilitify is a utility program for working with collections such as objects, arrays and tuples numbers, strings, etc.. An input validation error vulnerability exists in versions of utilitify prior to 1.0.3. The vulnerability stems from a networked system or product that does not properly validate...

ABB eSOMS Information Disclosure Vulnerability (CNVD-2020-17169)

ABB eSOMS is a plant operations management system from ABB Switzerland. An information disclosure vulnerability exists in ABB eSOMS 6.0.3 and prior versions. The vulnerability arises from an error in the configuration, etc. of a networked system or product during operation. An unauthorized attack...

Podman Authorization Issues Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. An authorization issue vulnerability exists in Podman version 1.6.0 that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. No detailed...

Systemd Resource Management Error Vulnerability

Systemd is a Linux-based system and service manager from the German software developers Lennart Poettering. The product is compatible with SysV and LSB startup scripts and provides a framework for representing dependencies between system services. Systemd is vulnerable to a resource management...

Video: Ransomware a Growing Industrial Security Threat

SAN FRANCISCO – Today, Operational Technology OT and Information Technology systems are merging and changing security playbooks. Here at RSA Conference 2020, Waterfall Security‘s CEO and co-founder Lior Frenkel describes the front lines of the convergence. Frenkel maintains that just as more...

Libyang Input Validation Error Vulnerability

libyang is a YANG data modeling language parser and toolkit written in C. It can be used as a toolkit for data modeling. An input validation error vulnerability exists in yyparse in versions prior to libyang v1.0-r1. The vulnerability stems from a networked system or product that does not properl...

Zoho ManageEngine Remote Access Plus Code Issue Vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO. A code issue vulnerability exists in Zoho ManageEngine Remote Access Plus version 10.0.447. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No...

Python Resource Management Error Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. There is a security vulnerability in Python. The vulnerability stems from mismanagement of system resourc...

Google TensorFlow Code Issues Vulnerabilities

TensorFlow is an end-to-end open source platform for machine learning. A code issue vulnerability exists in Google TensorFlow. The vulnerability stems from a networked system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...