CVE-2020-35457

DISPUTED GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed...

Integer overflow

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

CVE-2020-35457

GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of...

Integer Overflow or Wraparound

DISPUTED GNOME GLib has an integer overflow, that might lead to an out-of-bounds write, in goptiongroupaddentries. NOTE: the vendor's position is "Realistically this is not a security issue. The standard pattern is for callers to provide a static list of option entries in a fixed number of calls ...

PT-2020-5736 · Zyxel · Zyxel Usg

Name of the Vulnerable Software and Affected Versions: Zyxel USG devices version 4.60 Description: The issue concerns an undocumented account zyfwp with an unchangeable password that can be found in cleartext in the firmware of Zyxel USG devices. This account allows someone to login to the ssh...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

Design/Logic Flaw

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

Hackers-for-hire APT group found targeting businesses globally

By Deeba Ahmed A hackers-for-hire APT group is using a strain of yet undocumented malware and targeting South Asian firms in the CostaRicto campaign. This is a post from HackRead.com Read the original post: Hackers-for-hire APT group found targeting businesses globally...

The vulnerability of the command-line interface of Cisco Firepower Threat Defense microprogramming systems allows attackers to gain access to hidden commands.

The vulnerability of the command-line interface of Cisco Firepower Threat Defense software-related microprogramming systems is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow attackers to gain access to hidden commands...

CVE-2020-16259

Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...

Design/Logic Flaw

Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...

CVE-2020-16259

Affected product: Winston 1.5.4 devices. Issue: an SSH user account is accessible from bastion hosts, described as undocumented and not announced to users. This root cause enables full compromises of confidentiality, integrity, and availability per CVSS 3.1/5.0? (from the CVE data: attacker could...

CVE-2020-16259

Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user...

CVE-2019-14716

Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...

CVE-2019-14715

Verifone Pinpad Payment Terminals allow undocumented physical access to the system via an SBI bootloader memory write operation...

Code injection

Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...

CVE-2019-14716

Verifone VerixV Pinpad Payment Terminals with QT000530 have an undocumented physical access mode aka VerixV shell.out...

CVE-2019-14716

CVE-2019-14716 affects Verifone VerixV Pinpad terminals with QT000530, where an undocumented physical access mode (VerixV shell.out) exists. The vulnerability is triggered via physical access and is described with local access () and low attack complexity; CVSS v3.1 vectors indicate PHYSICAL acc...