1002 matches found
Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.
Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...
Memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co.(CNVD-2021-15521)
Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...
Binary Vulnerability in PM Designer V2.1.07.39 at Pingtone Technology Co.
Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A binary vulnerability exists in PM Designer V2.1.07.39 of Pingtong Technology Co., Ltd. which can be exploited by attackers to cause a program crash...
CVE-2020-26049
Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...
CVE-2020-26049
Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...
Design/Logic Flaw
Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...
CVE-2020-26049
CVE-2020-26049 affects Nifty-PM CPE 2.3 and is due to stored HTML injection in a component/feature, enabling remote arbitrary code execution as described in the CVE overview. The connected Red Hat advisory and NVD entries corroborate the impact as remote code execution via stored HTML injection. ...
CVE-2020-26049
Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution...
CVE-2020-25096
LogRhythm Platform Manager PM 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact with. However, no access control is enforced for WebSocket-based communication to the PM application...
CVE-2020-25095
LogRhythm Platform Manager PM 7.4.9 allows CSRF. The Web interface is vulnerable to Cross-site WebSocket Hijacking CSWH. If a logged-in PM user visits a malicious site in the same browser session, that site can perform a CSRF attack to create a WebSocket from the victim client to the vulnerable P...
CVE-2020-25095
CVE-2020-25095 concerns LogRhythm Platform Manager (PM) 7.4.9, where the web interface is vulnerable to CSRF via Cross-site WebSocket Hijacking (CSWH). If a logged-in PM user visits a malicious site in the same browser session, the attacker can establish a WebSocket from the victim’s client to th...
CVE-2020-25096
CVE-2020-25096 affects LogRhythm Platform Manager (PM) 7.4.9 and describes an Incorrect Access Control issue where WebSocket-based communication to the PM application server is not protected by access control, allowing a low-privilege user to interact with any back-end component that has a LogRhy...
kernel security and bug fix update
4.18.0-240.8.13.OL8 - Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x64...
pm-train.ru Cross Site Scripting vulnerability OBB-1476226
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-10.ch Cross Site Scripting vulnerability OBB-1471417
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-train.ru Cross Site Scripting vulnerability OBB-1464933
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-10.ch Cross Site Scripting vulnerability OBB-1459310
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-reisen-fredenbeck.de Cross Site Scripting vulnerability OBB-1432853
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-blau-weiss.de Cross Site Scripting vulnerability OBB-1432846
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
pm-10.ch Cross Site Scripting vulnerability OBB-1393189
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...