CVE-2020-10632 ICSA-20-140-02 Emerson OpenEnterprise

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner...

CVE-2020-10632

The CVE-2020-10632 entry concerns Emerson OpenEnterprise up to version 3.3.4, where inadequate folder security permissions could allow modification of important configuration files, potentially causing system failure or unpredictable behavior. Connected sources (Red Hat, CISA ICS, CVE records) co...

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a system failure...

The vulnerability of the implementation of the sampled_data_finish() function in the software for processing, transforming, and generating Ghostscript documents allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the sampleddatafinish function in the software for processing, transforming, and generating Ghostscript documents is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failur...

The vulnerability of the Nvidia GPU driver nvlddmkm.sys allows a hacker to trigger a service failure.

The vulnerability of the Nvidia GPU driver “nvlddmkm.sys” is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of Adobe Audition for Windows and macOS, related to the operation of operations beyond buffer boundaries in memory, allows a hacker to trigger a system failure.

The vulnerability of Adobe Audition’s audio editing software for Windows and macOS is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of Adobe Audition for Windows and macOS, related to the operation of operations beyond buffer boundaries in memory, allows a hacker to trigger a system failure.

The vulnerability of Adobe Audition’s audio editing software for Windows and macOS is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the software for creating metadata, processing, and exchanging sets of Adobe XMP-Toolkit-SDK standards is related to buffer overflows in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the software for creating, processing, and exchanging metadata using the Adobe XMP-Toolkit-SDK is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK standards is related to buffer overflow errors in dynamic memory. This vulnerability allows attackers to cause system failures.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation can exceed the buffer boundaries into memory. This allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation goes beyond the buffer boundaries into memory during PDW-file syntax analysis. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures...

The vulnerability in the hw/net/e1000e_core.c component of the hardware emulation software QEMU allows a hacker to induce a system failure.

The vulnerability in the hw/net/e1000ecore.c component of the hardware emulation software QEMU is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the QEMU hardware emulation API, related to writing beyond the buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation API is related to an initialization error in the memory region cache. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the oss_write component of the hardware emulation software based on QEMU, which stems from the lack of protection against division by zero, allows a malicious actor to trigger a service failure.

The vulnerability of the osswrite component of the QEMU hardware emulation software is related to the lack of protection against division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the e1000e wireless bridge in the hardware emulation software QEMU, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of the e1000e wireless bridge in the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to cause a system failure...

The vulnerability of the filter_vertically_8 component in the Ffmpeg library, related to buffer overflow in memory, allows a hacker to cause a system failure.

The vulnerability of the filtervertically8 component in the Ffmpeg library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Siemens SINUMERIK

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SINUMERIK Controllers Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker, with network...

The vulnerability in the implementation of the ti_sysbios_rts_MemAlloc_alloc() function (tirtos/packages/ti/sysbios/rts/MemAlloc.xdt) in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the tisysbiosrtsMemAllocalloc implementation tirtos/packages/ti/sysbios/rts/MemAlloc.xdt in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, is caused by a numerical overflow. Exploiting this vulnerability c...

The vulnerability of the Linux operating system’s kernel, related to memory initialization errors, allows a hacker to cause a system failure.

The vulnerability of the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ENISA says System Failure is on the Rise

The agency’s latest reports said that system failure comprises more than half of telecom incidents for 2020. Sixty-nine percent of incidents also affected the qualified trust services during the same year...

The vulnerability of the ati_2d_blt() function in the QEMU hardware emulation software allows a hacker to induce a system failure.

The vulnerability of the ati2dblt function in the QEMU hardware emulation software is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a system failure...