162 matches found
@automatacontrols/automata-thermostat (>=1.0.7 <=1.0.12), @clysema/node-red-contrib-ui-week-schedule (>=0.1.0 <=0.1.4) +30 more potentially affected by CVE-2022-3783 via node-red-dashboard (>=2.13.2 <=3.1.7)
node-red-dashboard NPM version =2.13.2, =1.0.7, =0.1.0, =0.0.1, =1.0.0, =2.0.0, =0.3.0, =0.0.5, =1.0.5-alpha.11, =2.5.0, =0.0.3, =1.2.0, =0.5.1, =0.8.0 - mtr-dashboard =0.0.1 and more Source cves: CVE-2022-3783 Source advisory: OSV:GHSA-VRV9-3X3W-FFXW...
Getting It Done: It’s Go Time for Bold Leadership in Sustainability
Sustainability professionals from around the world convened in New York City for Climate Week NYC 2022, exploring the theme of the week to “get it done.”...
experiencegreenwichweek.com Cross Site Scripting vulnerability OBB-3001175
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
TOTOLINK NR1800X setParentalRules method buffer overflow vulnerability
TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE broadband access device from China's Gion Electronics TOTOLINK, which is mainly used for the deployment of NR fixed data services in homes and offices to support 5G NR network connectivity. The TOTOLINK NR1800X suffers from a buffer overflow...
CVE-2022-41524
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...
Stack overflow
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, and eTime parameters in the setParentalRules function...
rotterdamartweek.info Cross Site Scripting vulnerability OBB-2906520
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cybersecurity Is a Team Sport: 3 Takeaways from Israel’s Cyber Week
The future of cybersecurity relies on successful international partnerships and collaboration to ultimately thwart cybercriminals and cyberattacks...
CVE-2022-32051
TOTOLINK T6 V4.1.9cu.5179B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN004133c4...
CVE-2022-32051
CVE-2022-32051 concerns the TOTOLINK T6 router. A stack overflow is triggered in FUN_004133c4 via the desc, week, sTime, and eTime parameters, with input length not checked, affecting TOTOLINK T6 version 4.1.9cu.5179_B20201015. The vulnerability can cause a denial of service due to uncontrolled s...
PT-2022-21076 · Totolink · Totolink T6
Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered in the TOTOLINK T6, affecting the desc, week, sTime, and eTime parameters within the FUN 004133c4 function. Recommendations: For TOTOLINK T6 version...
Data Protection as the Foundation of Trust: Celebrating Privacy Awareness Week in APAC
As part of our mission to help organisations protect their data and all paths to it, Imperva is supporting Privacy Awareness Week in Australia and Singapore, with the aim of educating individuals and organisations about the importance of data privacy and protection. In today’s digital economy, da...
Imperva Champions Data Privacy Week 2022
As a cybersecurity industry leader, Imperva is working with the National Cybersecurity Alliance NCA as a 2022 Data Privacy Week Champion to promote the need for businesses to prioritize data privacy and protection and the importance of individuals and companies to secure their online data. As par...
SUSE: Security Advisory (SUSE-SU-2019:13991-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HackerOne: HackerOne making payments in USDC (Coinbase stable coin)
Summary: Hello Everyone, My name is Ariel and I’m a manager in HackerOne’s community team. As a part of a Hack Week project, HackerOne is now supporting payments via USDC, Coinbase’s stable coin. This has been a feature requested by many hackers, that we are now glad to announce as supported. Mor...
[SECURITY] Fedora 34 Update: gnome-calendar-40~rc-1.fc34
Calendar is a simple and beautiful calendar application designed to fit GNOME 3. Features: Week, month and year views Basic editing of events Evolution Data Server integration Search support...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Ill be speaking at Cyber Week Online, October 19-21, 2020. Ill be speaking at the IEEE Symposium on Technology and Society virtual conference, November 12-15, 2020. Ill be keynoting the 2020 Conference on Cyber Norms on November 12...
fashionweekdaily.com Improper Access Control vulnerability OBB-1375557
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
hertfordtheatreweek.org.uk Cross Site Scripting vulnerability OBB-1316760
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
week-n.com Cross Site Scripting vulnerability OBB-1280616
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...