srt-zg.com Cross Site Scripting vulnerability OBB-3231703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

srt-zg.com Cross Site Scripting vulnerability OBB-2616416

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series SMT Series ID=18: UPS 09.8 and prior / SMT Series...

CVE-2022-0715

A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Series SMT Series ID=18: UPS 09.8 and prior / SMT Series...

多款Schneider Electric产品数据伪造问题漏洞

The Schneider Electric APC Smart-UPS SMC Series, among others, is a product of Schneider Electric, a French company. The Schneider Electric APC Smart-UPS SMT Series is a line interactive power protection for servers, point-of-sale, routers, switches, hubs and other network equipment. The Schneide...

PT-2022-1931 · Apc · Apc Smart-Ups Family +1

Name of the Vulnerable Software and Affected Versions: APC Smart-UPS Family: SMT Series versions 09.8 and prior APC Smart-UPS Family: SMT Series versions 01.2 and prior APC Smart-UPS Family: SMT Series versions 03.1 and prior APC Smart-UPS Family: SMC Series versions 14.1 and prior APC Smart-UPS...

[SECURITY] Fedora 33 Update: mediainfo-21.03-1.fc33

MediaInfo CLI Command Line Interface. What information can I get from MediaInfo? General: title, author, director, album, track number, date, duration... Video: codec, aspect, fps, bitrate... Audio: codec, sample rate, channels, language, bitrate... Text: language of subtitle Chapters: number of...

Phoenix Contact PC WORX SRT Elevation of Privilege Vulnerability

Phoenix Contact PC WORX SRT is a programmable logic controller from Phoenix Contact, Germany. A security vulnerability exists in Phoenix Contact PC WORX SRT version 1.14 and earlier, which stems from insecure default path privileges. An attacker can exploit the vulnerability to elevate privileges...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

Privilege escalation

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

CVE-2020-10939

CVE-2020-10939 affects PHOENIX CONTACT PC WORX SRT up to v1.14. Insecure default path permissions enable local privilege escalation. Documented by multiple sources (NVD entry, Red Hat advisory, CNVD, PRION, etc.). Root cause: insecure default path privileges. Impact: local privilege escalation; C...

CVE-2020-10939

Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation...

openSUSE: Security Advisory for srt (openSUSE-SU-2019:2083-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2019-19819 · FFmpeg · Libav

Name of the Vulnerable Software and Affected Versions: Libav version 12.3 Description: A stack-based buffer overflow issue exists in the subtitle decoder of Libav, potentially allowing attackers to corrupt the stack via a crafted video file in Matroska format. This issue arises from the misuse of...

Security update for srt (moderate)

openSUSE Security Update: Security update for srt Announcement ID: openSUSE-SU-2019:2128-1 Rating: moderate References: 1148844 Cross-References: CVE-2019-15784 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: srt was updated t...

OPENSUSE-SU-2019:2128-1 Security update for srt

srt was updated to version 1.3.4. Security issues fixed: CVE-2019-15784: avoid a potential array overflow. boo1148844 New binary: srt-tunnel srt-multiplexer binary is now a testing application and thus is dropped from our package. This update was imported from the openSUSE:Leap:15.1:Update update...

openSUSE Security Update : srt (openSUSE-2019-2083)

srt was updated to version 1.3.4. Security issues fixed : - CVE-2019-15784: avoid a potential array overflow. boo1148844 - New binary: srt-tunnel - srt-multiplexer binary is now a testing application and thus is dropped from our package. C Tenable Network Security, Inc. The descriptive text and...

OPENSUSE-SU-2019:2083-1 Security update for srt

srt was updated to version 1.3.4. Security issues fixed: CVE-2019-15784: avoid a potential array overflow. boo1148844 New binary: srt-tunnel srt-multiplexer binary is now a testing application and thus is dropped from our package...

Security update for srt (moderate)

openSUSE Security Update: Security update for srt Announcement ID: openSUSE-SU-2019:2083-1 Rating: moderate References: 1148844 Cross-References: CVE-2019-15784 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: srt was updated to version...