1888 matches found
Security update for minidlna (moderate)
openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...
CVE-2020-28342
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 China / India software. The S Secure application allows attackers to bypass authentication for a locked Gallery application via the Reminder application. The Samsung ID is SVE-2020-18689 November 2020...
CVE-2020-28341
The CVE-2020-28341 entry concerns Samsung mobile devices running Q(10.0) on Exynos990 chips, where the S3K250AF Secure Element CC EAL 5+ chip is affected. The underlying issue is a buffer overflow in the Secure Element component, leading to arbitrary code execution and leakage of sensitive inform...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
CVE-2020-5652
The CVE-2020-5652 vulnerability affects Mitsubishi Electric MELSEC iQ-R, Q, and L Series CPU modules. A specially crafted Ethernet packet can cause uncontrolled resource consumption, stopping Ethernet communications and leading to a DoS. Affected products include iQ-R CPUs (R00, R01, R02, R04 EN,...
CVE-2020-5652
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 EN CPU firmware versions '52' and earlier, R 08/16/32/120 SFCPU firmware versions '22' and earlier, R 08/16/32/120 PCPU...
PT-2020-18619 · Mitsubishi · Melsec Q03 Udecpu +11
Name of the Vulnerable Software and Affected Versions: MELSEC iQ-R series CPU modules versions '20' and earlier MELSEC Q series CPU modules versions '52' and earlier MELSEC L series CPU modules versions with serial number '22081' and earlier MELSEC iQ-R R 04/08/16/32/120 EN CPU firmware versions...
Mitsubishi Electric MELSEC iQ-R, Q, and L Series (Update E)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Equipment : MELSEC iQ-R, Q, and L Series Vulnerability : Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a...
CVE-2020-24990
The CVE-2020-24990 issue affects QSC Q-SYS Core Manager 8.2.1 via the TFTP service on UDP/69, enabling a directory traversal to read OS files (e.g., /etc/passwd, /proc/version). Root cause: TFTP GET requests bypass path filtering. Impact is partial confidentiality loss without integrity/availabil...
CVE-2020-24990
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version...
q-foodbar.be Cross Site Scripting vulnerability OBB-1431909
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-26600
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
CVE-2020-26600
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
CVE-2020-26601
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
CVE-2020-26599
An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...
Code injection
An issue was discovered in DirEncryptService on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. PendingIntent with an empty intent is mishandled, allowing an attacker to perform a privileged action via a modified intent. The Samsung ID is SVE-2020-18034 October 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with Q10.0 software. Auto Hotspot allows attackers to obtain sensitive information. The Samsung ID is SVE-2020-17288 October 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with Q10.0 software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 October 2020...