3445 matches found
CVE-2020-13524
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victi...
CVE-2020-13498
An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbitrary out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and a...
CVE-2020-13493
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...
CVE-2020-13494
A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability...
Heap overflow
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file format path jumps decompression heap overflow in a way path jumps are processed. To trigger this vulnerability, the victim needs to open an...
PT-2020-5035 · Atlassian +6 · Bamboo Data Center/Server +7
Name of the Vulnerable Software and Affected Versions: XStream versions prior to 1.4.14 Bamboo Data Center and Server version 9.2.1 Description: The issue exists due to the lack of neutralization of special elements used in operating system commands. This may allow a remote attacker to execute...
Vulnerabilities fixed in Schneider Electric products
Schneider Electric has fixed vulnerabilities in several ICS and SCADA products. The vulnerabilities allow a malicious potentially able to launch attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS Denial-of-Service DoS. Data...
Microsoft Azure Sphere Tampering Vulnerability
Azure Sphere is a secure, advanced application platform with built-in communications and security features for connected devices. A tampering vulnerability exists in Microsoft Azure Sphere versions prior to 20.07. No detailed vulnerability details are provided at this time...
CVE-2019-17573
creationtimestamp| type| source ---|---|--- 2020-11-12 16:31:39+00:00| seen| https://t.me/cibsecurity/16206 2023-11-12 19:05:42+00:00| seen| https://t.me/arpsyndicate/132 2025-08-21 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwwto2ju6z2t...
Vulnerabilities identified in Siemens S7 products
Vulnerabilities have been identified in Siemens S7 products. The vulnerabilities enable a remote malicious person to to cause a denial-of-service and to circumvent a security measure circumvention. Siemens categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 5....
wool.com.uy Cross Site Scripting vulnerability OBB-1491788
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ymqa.net Cross Site Scripting vulnerability OBB-1489730
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Asterisk 17.6.0 / 17.5.1 Denial Of Service
Asterisk crash due to INVITE flood over TCP - Fixed versions: 13.37.1, 16.14.1, 17.8.1, 18.0.1 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2020-02-asterisk-tcp-invite-crash - Asterisk Security Advisory:...
corporation-lawyer.biz Cross Site Scripting vulnerability OBB-1482723
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
libssh: unsanitized location in scp could lead to unwanted command execution
A flaw was found with the libssh API function sshscpnew. A user able to connect to a server using SCP could execute arbitrary command using a user-provided path, leading to a compromise of the remote target...
monte-travel.ru Cross Site Scripting vulnerability OBB-1465586
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
one2ch.wpblog.jp Cross Site Scripting vulnerability OBB-1452936
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
maof.info Cross Site Scripting vulnerability OBB-1452641
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
guiadecompra.com Improper Access Control vulnerability OBB-1443156
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sistemaftpcl.com Cross Site Scripting vulnerability OBB-1436087
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...