5774 matches found
PT-2020-4058
Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 11.8.77 IntelR AMT and IntelR ISM versions before 11.12.77 IntelR AMT and IntelR ISM versions before 11.22.77 IntelR AMT and IntelR ISM versions before 12.0.64 Description: The issue is related to an...
PT-2020-4048
Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 12.0.64 IntelR CSME versions prior to 13.0.32 IntelR CSME versions prior to 14.0.33 IntelR CSME versions prior to 14.5.12 Description: The issue is related to an out-of-bounds write in a subsystem, which may allo...
PT-2020-4000
Name of the Vulnerable Software and Affected Versions: IntelR Innovation Engine versions prior to 1.0.859 Description: The issue is related to insufficient control flow management in the firmware build and signing tool, which may allow an unauthenticated user to potentially enable escalation of...
PT-2020-4045
Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.76 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to improper input validation in IntelR AMT, which may allo...
PT-2020-3999
Name of the Vulnerable Software and Affected Versions: IntelR CoreTM Processor families versions 7th through 10th Generation Description: The issue is related to improper buffer restrictions in BIOS firmware, which may allow an authenticated user to potentially enable escalation of privilege and/...
PT-2020-4054
Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR ISM versions before 11.8.77 IntelR AMT and IntelR ISM versions before 11.12.77 IntelR AMT and IntelR ISM versions before 11.22.77 IntelR AMT and IntelR ISM versions before 12.0.64 Description: The issue is related to...
PT-2020-4242
Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelRISM versions prior to 11.8.77 IntelR AMT and IntelRISM versions prior to 11.12.77 IntelR AMT and IntelRISM versions prior to 11.22.77 IntelR AMT and IntelRISM versions prior to 12.0.64 IntelR AMT and IntelRISM versions...
PT-2020-4143
Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.77 IntelR AMT versions prior to 11.12.77 IntelR AMT versions prior to 11.22.77 IntelR AMT versions prior to 12.0.64 Description: The issue is related to insufficiently protected credentials in IntelR AMT, whi...
PT-2020-4051
Name of the Vulnerable Software and Affected Versions: IntelR CSME versions prior to 11.8.76 IntelR CSME versions prior to 11.12.77 IntelR CSME versions prior to 11.22.77 Description: The issue is related to a reversible one-way hash in IntelR CSME, which may allow a privileged user to potentiall...
RHEL 8 : kernel (RHSA-2020:2427)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2427 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in block/bfq-iosched.c...
PT-2020-4056
Name of the Vulnerable Software and Affected Versions: IntelR SPS versions before SPS E3 04.01.04.109.0 IntelR SPS versions before SPS E3 04.08.04.070.0 Description: The issue is related to improper initialization in a subsystem, which may allow an authenticated user to potentially enable...
Mitsubishi Electric MELSEC iQ-R Series (Update C)
1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC iQ-R Series Vulnerability: Resource Exhaustion 2. UPDATE INFORMATION This updated advisory is a follow-up to the advisory update titled ICSA-20-161-02 Mitsubishi...
Design/Logic Flaw
Crypt::Perl::ECDSA in the Crypt::Perl aka p5-Crypt-Perl module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s are small and when s = 1. This happens when using the curve secp256r1 prime256v1. This could conceivably have a security-relevant impact if an attacker wishes ...
CVE-2018-21242
An issue was discovered in Foxit PhantomPDF before 8.3.6. It allows Remote Code Execution via a GoToE or GoToR action...
r-ijin.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184226 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Multiple Mitsubishi Electric Products Resource Management Error Vulnerability
The Misubishi Electric MELSEC iQ-R series is a programmable logic controller from Misubishi Electric. A resource management error vulnerability exists in several Mitsubishi Electric products. An attacker could cause a denial of service by sending a large amount of data to the MELSOFT transport po...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5670)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5670 advisory. - brcmfmac: add subtype check for event handling in data path John Donnelly Orabug: 30776354 CVE-2019-9503 - mwifiex: pcie: Fix memory leak in...
CVE-2019-19100
A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.4SP, . 4.6.3SP, 4.7.2 and 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface...
CVE-2019-19102
A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip...
Design/Logic Flaw
A missing secure communication definition and an incomplete TLS validation in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, 4.3.11SP, 4.4.9SP, 4.5.5SP, 4.6.4 and 4.7.2 enable unauthenticated users to perform MITM attacks via the B&R upgrade server...