CVE-2023-6711

CVE-2023-6711 concerns Hitachi Energy RTU500 series CMU vulnerability in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 components. Reports describe insufficient input/validation of specially crafted messages, causing a buffer overflow that can result in a reboot of the RTU500 CMU. Affected products...

CVE-2023-6711

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an...

CVE-2023-6711: Buffer Copy without Checking Size of Input

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Specially crafted messages sent to the mentioned components are not validated properly and can result in buffer overflow and as final consequence to a reboot of an...

PT-2025-37528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a reference count leak in the ti sci intr irq domain probe function within the irqchip/ti-sci module. The of irq find parent function increments the reference...

GSD-2022-1003056 soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc

soc: ti: tiscipmdomains: Check for null return of devmkcalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

PT-2022-31835

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a potential null pointer dereference in the ti sci pm domains module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-31319

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a potential null pointer dereference in the ti sci pm domains module, specifically in the devm kcalloc function. The actual impact and attack plausibility have not yet...

PT-2022-30989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a potential null pointer dereference in the ti sci pm domains module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-31619

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.15.46 Description The issue is related to a potential null pointer dereference in the ti sci pm domains module, specifically with the devm kcalloc function. The actual impact and attack plausibility have not ye...

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-R67P-M7G9-GXW6...

discovery-sci.com Cross Site Scripting vulnerability OBB-2643683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sci-fi.love Cross Site Scripting vulnerability OBB-2383194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:GHSA-9783-42PM-X5JQ...

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:RUSTSEC-2021-0088...

sci-en-tech.com XSS vulnerability

Open Bug Bounty ID: OBB-633507 Description| Value ---|--- Affected Website:| sci-en-tech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OMP 1.2 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GIMPS: Root privilege escalation

Background GIMPS, the Great Internet Mersenne Prime Search, is a software capable of find Mersenne Primes, which are used in cryptography. GIMPS is also used for hardware testing. Description It was discovered that Gentoo’s default GIMPS installation suffered from a privilege escalation...

Hardcoded credentials

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...

CVE-2017-14484

Summary: CVE-2017-14484 affects Gentoo’s sci-mathematics/gimps prior to 28.10-r1, enabling a local user to escalate privileges by creating a hard link under /var/lib/gimps due to an unsafe chown -R in the init/checkconfig path. The vulnerability is documented in multiple sources (NVD description ...

CVE-2017-14484: Improper Privilege Management

The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search GIMPS allows local users to gain privileges by creating a hard link under /var/lib/gimps, because an unsafe "chown -R" command is executed...

SIMM-Comm SCI Photo Chat 3.4.9 Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information tha...