CVE-2020-11642: Files or Directories Accessible to External Parties

The local file inclusion vulnerability present in B&R SiteManager versions 9.2.620236042 allows authenticated users to impact availability of SiteManager instances...

PT-2020-12744

Name of the Vulnerable Software and Affected Versions B&R SiteManager versions prior to 9.2.620236042 Description The issue allows authenticated users to impact the availability of SiteManager instances due to a local file inclusion vulnerability. Recommendations For versions prior to...

CVE-2020-11644: Improper Output Neutralization for Logs

The information disclosure vulnerability present in B&R GateManager 4260 and 9250 versions 9.0.20262 and GateManager 8250 versions 9.2.620236042 allows authenticated users to generate fake audit log messages...

PT-2020-12742

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to N4.26 B&R Automation Runtime versions prior to N4.34 B&R Automation Runtime versions prior to F4.45 B&R Automation Runtime versions prior to E4.53 B&R Automation Runtime versions prior to D4.63 B&R...

CVE-2020-11637: Missing Release of Memory after Effective Lifetime

A memory leak in the TFTP service in B&R Automation Runtime versions...

PT-2020-4787

Name of the Vulnerable Software and Affected Versions: IntelR Wireless BluetoothR products versions prior to 21.110 Description: The issue is related to improper buffer restriction in IntelR Wireless BluetoothR products, which may allow an unauthenticated user to potentially enable escalation of...

CVE-2020-26604

An issue was discovered in SystemUI on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. PendingIntent allows an unprivileged process to access contact numbers. The Samsung ID is SVE-2020-18467 October 2020...

RHEL 7 : qemu-kvm-rhev (RHSA-2020:4176)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4176 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide the...

PT-2020-16478

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q10.0 and R11.0 software Description An issue allows attackers to obtain sensitive information by reading a log. Recommendations For Samsung mobile devices with Q10.0 software, update to a version that fixes this...

CVE-2020-26605: Insertion of Sensitive Information into Log File

An issue was discovered on Samsung mobile devices with Q10.0 and R11.0 Exynos chipsets software. They allow attackers to obtain sensitive information by reading a log. The Samsung ID is SVE-2020-18596 October 2020...

CVE-2019-14557: Buffer Copy without Checking Size of Input

Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access...

CVE-2020-0571: Undefined Security Weakness

Improper conditions check in BIOS firmware for 8th Generation IntelR CoreTM Processors and IntelR PentiumR Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12302: Incorrect Permission Assignment for Critical Resource

Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8671: Undefined Security Weakness

Insufficient control flow management in BIOS firmware 8th, 9th Generation IntelR CoreTM Processors and IntelR CeleronR Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-14556: Improper Initialization

Improper initialization in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-14558: Undefined Security Weakness

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

randrcommercialrealty.com Cross Site Scripting vulnerability OBB-1382011

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-12748

Name of the Vulnerable Software and Affected Versions B&R GateManager 4260 versions prior to 9.0.20262 B&R GateManager 8250 versions prior to 9.2.620236042 B&R GateManager 9250 versions prior to 9.0.20262 Description A log information disclosure issue allows authenticated users to view log...

PT-2020-12743

Name of the Vulnerable Software and Affected Versions B&R SiteManager versions prior to 9.2.620236042 Description A local file inclusion issue allows authenticated users to read sensitive files from SiteManager instances. Recommendations For versions prior to 9.2.620236042, update to version...

PT-2020-18706

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue is related to insufficient output sanitization, which allows an unauthenticated attacker to conduct reflected cross-site scripting. This can be achieved via a crafted action or...