PT-2020-18710

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to read the contents of arbitrary files on disk due to a Relative Path Traversal vulnerability in the firmware. Recommendations For...

Important: Red Hat Security Advisory: qemu-kvm-ma security update

An update for qemu-kvm-ma is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

B&R Automation SiteManager and GateManager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Industrial Automation GmbH Equipment: SiteManager and GateManager Vulnerabilities: Path Traversal, Uncontrolled Resource Consumption, Information Exposure, Improper Authentication, Information...

r-ijin.com Cross Site Scripting vulnerability OBB-1349964

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

r-soudan.jp Cross Site Scripting vulnerability OBB-1340189

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-24457: Undefined Security Weakness

Logic error in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

CVE-2020-8758: Undefined Security Weakness

Improper buffer restrictions in network subsystem in provisioned IntelR AMT and IntelR ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticat...

PT-2020-4265

Name of the Vulnerable Software and Affected Versions: IntelR Driver & Support Assistant versions prior to 20.7.26.7 Description: The issue is related to improper permissions in the IntelR Driver & Support Assistant, which may allow an authenticated user to potentially enable escalation of...

PT-2020-4288

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM versions 8th through 10th Generation IntelR CeleronR Processor versions 4000 & 5000 Series Description: The issue is related to improper initialization in BIOS firmware, which may allow a privileged user to enable denial of...

PT-2020-4285

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM and IntelR CeleronR Processor 4000 Series Processors affected versions not specified Description: The issue is related to an out of bound read in BIOS firmware, which may allow an unauthenticated user to potentially enable...

walter-r-habicht.de Cross Site Scripting vulnerability OBB-1285201

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

r-troyka.ru Cross Site Scripting vulnerability OBB-1280522

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

libpcre in PCRE before 8.43 allows a subject buffer over-read in JIT when UTF is disabled and \X or \R has more than one fixed quantifier a related issue to CVE-2019-20454.

...

Code injection

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12301

Improper initialization in BIOS firmware for IntelR Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access...

Authentication flaw

Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

Authentication flaw

Improper authentication in socket services for some IntelR Server Boards, Server Systems and Compute Modules before version 2.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8731: Incorrect Permission Assignment for Critical Resource

Incorrect execution-assigned permissions in the file system for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8706: Buffer Copy without Checking Size of Input

Buffer overflow in a daemon for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8718: Buffer Copy without Checking Size of Input

Buffer overflow in a subsystem for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...