PT-2020-17982

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.6.1, version 7.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2020-17970

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 6.0.2 through 6.0.6.1, version 7.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

CVE-2020-4295: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4281: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Security Bulletin: Multiple vulnerabilities affects IBM Engineering Requirements Management DOORS Next

Summary There are multiple vulnerabilities that affects IBM Engineering Requirements Management DOORS Next, called before Rational DOORS Next Generation Vulnerability Details CVEID: CVE-2016-10328 DESCRIPTION: Freetype 2 is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds...

CVE-2020-0207

In nextmarker of jdmarker.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID:...

CVE-2020-0143

In nfadmndeffindnexthandler of nfadmndef.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of heap data via compromised device firmware with System execution privileges needed. User interaction is not needed for...

Incorrect Authentication Vulnerability in Multiple Huawei Products (CNVD-2021-93841)

The Huawei USG9500 is a data center firewall product, the NGFW Module is a next-generation firewall NGFW module, and the NIP6800 is an intrusion prevention system. Multiple Huawei products are vulnerable to incorrect authentication. An attacker could exploit the vulnerability to gain certain...

CVE-2020-9099

Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; NIP6800; Secospace USG6300; Secospace USG6500; Secospace USG6600; USG9500 with versions of V500R001C00; V500R001C20; V500R001C30; V500R001C50; V500R001C60; V500R001C80; V500R005C00; V500R005C10; V500R005C20; V500R002C00; V500R002C10;...

supporto.next-cloud.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1169630 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

VMware Launches Next-Gen SOC Alliance with Splunk, IBM Security, Google Cloud’s Chronicle, Exabeam, and Sumo Logic

Today at Connect 2020, our company's annul cybersecurity conference, we made some exciting announcements, including the creation of a Next-Gen SOC Alliance. The alliance empowers SOC teams with visibility, prevention, detection and response capabilities that can uniquely leverage the VMware fabri...

DEBIAN-CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

UBUNTU-CVE-2020-12740

tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a getc operation. The issue is being triggered in the function getipv6next at common/get.c...

PT-2020-13233 · Acutect +3 · Tcpreplay +3

Name of the Vulnerable Software and Affected Versions: Tcpreplay versions 4.3.2 and earlier Description: The issue is a heap-based buffer over-read that occurs during a get c operation, specifically triggered in the function get ipv6 next at common/get.c. Recommendations: For Tcpreplay versions...

next-episode.net Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1151762 Security Researcher Esssayy Helped patch 88 vulnerabilities Received 5 Coordinated Disclosure badges Received 7 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting next-episode.net website and...

Use-after-free in Samba AD DC LDAP Server with ASQ

Description Samba has, since Samba 4.0, supported the Paged Results LDAP feature, to allow clients to obtain pages of search results against a Samba AD DC using an LDAP control. Since Samba 4.7.11 and 4.8.6 a Denial of Service prevention has been in place in this module, to age out old client...

Contiki and Contiki-NG Buffer Overflow Vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for the next generation of IoT Internet of Things devices. A buffer overflow vulnerability exists in Contiki-NG 4.3 and earlier and Contiki 3.0...

Contiki and Contiki-NG Input Validation Error Vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for the next generation of IoT Internet of Things devices. A security vulnerability exists in Contiki-NG 4.3 and earlier and Contiki 3.0 and...

next-at.net Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1146659 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting next-at.net website and it...