Schneider Electric Web Server on Modicon M340

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Web Server on Modicon M340, Modicon Quantum and Modicon Premium Legacy Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Classic Buffer Overflow 2. RISK...

HCL Domino Denial of Service Vulnerability (CNVD-2020-75064)

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino 10 and 11. The vulnerability stems from insufficient input validation to the public API. An attacker could exploit the vulnerability to cause the Domino server to cras...

CVE-2020-14273

HCL Domino is susceptible to a Denial of Service DoS vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to crash the Domino server...

CVE-2020-35668

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced...

HCL Software HCL Domino 输入验证错误漏洞

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino 10 and 11. The vulnerability stems from insufficient input validation to the public API. An attacker could exploit the vulnerability to cause the Domino server to cras...

CVE-2020-35668

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced...

Null pointer dereference

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced...

CVE-2020-35668

RedisGraph 2.x through 2.2.11 has a NULL Pointer Dereference that leads to a server crash because it mishandles an unquoted string, such as an alias that has not yet been introduced...

CVE-2020-35668

Technical details about CVE-2020-35668 are not publicly provided in the connected documents. Available descriptions only mention a NULL pointer dereference in RedisGraph 2.x up to 2.2.11. Monitor for updates.

Redisgraph Code Issue Vulnerability

Redisgraph is a graph model-based database from the Redisgraph community. A security vulnerability exists in RedisGraph 2.x series version 2.2.11 and earlier, which stems from having a null pointer dereference, which can cause the server to crash because it incorrectly handles unquoted strings,...

Kepware Kepserverex Buffer Error Vulnerability

Kepware Kepserverex is a software application from Kepware USA that communicates with a wide range of industrial equipment. The software supports more than 150 communication protocols and supports the delivery of reliable real-time data to organizations through a single platform. Kepware...

CVE-2020-16102

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to...

CVE-2020-16102

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to...

Authentication flaw

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to...

CVE-2020-16102

Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. This issue affects: Gallagher Command Centre 8.30 versions prior to...

CVE-2020-16102

Gallagher Command Centre Server is affected by an Improper Authentication vulnerability (CVE-2020-16102) allowing an unauthenticated remote attacker to create items with invalid configuration, potentially causing the server to crash and fail to restart. Public references list affected versions: 8...

Gallagher Group Command Centre Code Issue Vulnerability

Gallagher Group Command Centre is a centralized control tool for Gallagher access control systems from Gallagher Group of New Zealand. A security vulnerability exists in Gallagher Group Command Centre that could be exploited by a remote attacker to crash the server or potentially cause remote cod...

Amazon Linux 2 : bind (ALAS-2020-1564)

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1564 advisory. A flaw was found in bind. An assertion failure can occur when trying to verify a truncated response to a TSIG-signed...

AZL-7349 CVE-2020-14383 affecting package samba 4.12.5-7

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...

ALPINE-CVE-2020-14383

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again...