2373 matches found
CVE-2019-13998: Integer Overflow or Wraparound
u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity,...
PT-2020-5307
Name of the Vulnerable Software and Affected Versions QEMU versions prior to 5.0.0 Description The issue is related to an assertion failure in the network packet processing, affecting the e1000e and vmxnet3 network devices. A malicious guest user or process could exploit this flaw to abort the QE...
txvalves.com Cross Site Scripting vulnerability OBB-1219492
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-12447
A Local File Inclusion LFI issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow...
Directory traversal
A Local File Inclusion LFI issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow...
CVE-2020-12447
A Local File Inclusion LFI issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow...
CVE-2020-12447
Summary: CVE-2020-12447 affects Onkyo TX-NR585 family devices (web interface). The issue is a Directory Traversal / Local File Inclusion (LFI) vulnerability in the web interface that allows remote, unauthenticated network attackers to read sensitive files (e.g., /etc/shadow) via a directory trave...
PT-2020-13119
Name of the Vulnerable Software and Affected Versions Onkyo TX-NR585 version 1000-0000-000-0008-0000 Description A Local File Inclusion LFI issue allows remote unauthenticated users on the network to read sensitive files via directory traversal, such as reading /etc/shadow. This is achieved by...
CVE-2020-12447: Improper Limitation of a Pathname to a Restricted Directory
A Local File Inclusion LFI issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow...
CVE-2020-11102
hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...
CVE-2020-11102
hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...
CVE-2020-11102
hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r/w data length...
PT-2020-6476
Name of the Vulnerable Software and Affected Versions QEMU version 4.2.0 Description The issue is related to a buffer overflow in the hw/net/tulip.c component of the QEMU hardware emulator. This occurs during the copying of tx/rx buffers because the frame size is not validated against the r/w dat...
CentOS Update for bpftool CESA-2019:3979 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2019-16356
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...
CVE-2019-2283: Out-of-bounds Read
Improper validation of read and write index of tx and rx fifos before calculating pointer can lead to out-of-bound access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150,...
Slither v0.6.7 - Static Analyzer For Solidity
Slither is a Solidity static analysis framework written in Python 3. It runs a suite of vulnerability detectors, prints visual information about contract details, and provides an API to easily write custom analyses. Slither enables developers to find vulnerabilities, enhance their code...
CVE-2019-10499: Improper Validation of Array Index
Improper validation of read and write index of tx and rx fifos before using for data copy from fifo can lead to out-of-bound access. in Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, IPQ8074, QCS405, SD 665, SD 675, SD 730, SD 855...