Node.js -- September 2020 Security Releases

Node.js reports: Updates are now available for v10,x, v12.x and v14.x Node.js release lines for the following issues. HTTP Request Smuggling due to CR-to-Hyphen conversion High CVE-2020-8201 Affected Node.js versions converted carriage returns in HTTP request headers to a hyphen before parsing...

Security Bulletin: Vulnerability in IBM Java Runtime affects Host On-Demand

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by Host On-Demand. Host On-Demand has addressed the applicable CVE. The issue was disclosed as part of the IBM Java SDK and Runtime Environment updates in January 2020. Vulnerability Details CVEID: CVE-2019-4732...

Out-of-bounds

A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System IGSS, Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated...

Siemens SIMATIC NET SOFTNET-IE PROFINET IO V14 Software

Binary data 764691.prm...

Siemens CPU 1505SP and WinCC Runtime PLC Detection

Binary data 750318.prm...

CVE-2018-13798

Siemens SICAM A8000 RTU series (CP-8000 < v14, CP-802X < v14, CP-8050

elsfrigge.nl XSS vulnerability

Vulnerable URL: http://elsfrigge.nl/cgi-bin/v14/view.pl?db=%E2%80%9C/%3E%E2%80%99%3E/%3E%3E%22%3E%3Cimg%20src=1%20onerror=promptdocument.domain;%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Azure File Sync Agent v14 Release – October 2021

None None...