PT-2020-22500

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write crash. The crash state includes functions such as r buf read, parse function starts, and init items. N...

PT-2020-22377

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions check buffer, r bin get binplugin by buffer, and get plugin from...

PT-2020-22384

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash state involving functions such as r utf8 strlen, getstr, and...

PT-2020-22354

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-double-free crash. Technical details about the crash include the functions r list delete and r list purge, which are involve...

PT-2020-4903

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to the improper removal of sensitive information before storage or transfer in some IntelR Processors. This may allow an authenticated user to potentially...

Unspecified Vulnerability in Multiple Mitsubishi Electric Products

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric. A security vulnerability exists in a number of Mitsubishi Electric products. The vulnerability, which arises from the use of cleartext communication between a CPU module and GX Works3 or GX...

PT-2020-21832

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the functions r bin object rebuild classes ht, r bin object set items, and r bin...

PT-2020-21947

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as populate relocs record, relocs, and r bin...

PT-2020-22486

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a segmentation fault on an unknown address. The crash involves the pvector free elem, vector free elems, and ...

PT-2020-22049

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash state includes functions such as Pe64 r bin pe free, r bin file free, and r list delete. No...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...

CVE-2020-5594

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L and FX series CPU modules (all versions) are affected by CVE-2020-5594 due to cleartext transmission of sensitive information between CPU modules and GX Works3/GX Works2. The root cause is unsecured (cleartext) communication, with vectors not specified ...

PT-2020-18567

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules affected versions not specified Description The issue allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via...

CVE-2020-5594: Cleartext Transmission of Sensitive Information

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series CPU modules all versions contain a vulnerability that allows cleartext transmission of sensitive information between CPU modules and GX Works3 and/or GX Works2 via unspecified vectors...

CVE-2020-0541

Out-of-bounds write in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in the DAL subsystem for IntelR CSME versions before 11.8.77, 11.12.77, 11.22.77, 12.0.64, 13.0.32,14.0.33 and IntelR TXE versions before 3.1.75 and 4.0.25 may allow an unauthenticated user to potentially enable information disclosure via network access...

Design/Logic Flaw

Improper buffer restrictions in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege, information disclosure or denial of service via local access...

CVE-2020-0543

Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-0531: Improper Input Validation

Improper input validation in IntelR AMT versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an authenticated user to potentially enable information disclosure via network access...