367 matches found
CVE-2020-27823
A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Mitigation This flaw can be mitigated by...
y-leaders.com Cross Site Scripting vulnerability OBB-1471126
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
y-power.co.kr Cross Site Scripting vulnerability OBB-1365182
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-24354
Zyxel VMG5313-B30B router on firmware 5.13ABCJ.6b31127, and possibly older versions of firmware are affected by shell injection...
chaduri-na-edro-y.123roletnishtori.com Cross Site Scripting vulnerability OBB-1282803
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security fix for the ALT Linux 8 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 30, 2020 Sergey Y. Afonin in task 255498 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...
Security fix for the ALT Linux 9 package clamav version 0.102.4-alt1
0.102.4-alt1 built July 29, 2020 Sergey Y. Afonin in task 255486 July 28, 2020 Sergey Y. Afonin - 0.102.4 + CVE-2020-3350 + CVE-2020-3327 + CVE-2020-3481...
Multiple Mitsubishi Electric Products Null Pointer Reference Vulnerability
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. A null pointer reference vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker to...
Multiple Mitsubishi Electric Products License Issue Vulnerability
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. An authorization issue vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series. An attacker could exploit the vulnerabilit...
Buffer Overflow Vulnerability in Multiple Mitsubishi Electric Products
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. A buffer overflow vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series. An attacker could exploit the vulnerability to...
Multiple Mitsubishi Electric Products Resource Management Error Vulnerability (CNVD-2020-46798)
Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. A resource management error vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker...
CVE-2020-5597
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains a null pointer dereference vulnerability, which may allow a remote attacker to stop the network functions of the products ...
CVE-2020-5599
TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series CoreOS with version -Y and earlier installed in GT27 Model, GT25 Model, and GT23 Model contains an improper neutralization of argument delimiters in a command 'Argument Injection' vulnerability, which may allow a remot...
microcode_ctl security, bug fix and enhancement update
3:1.17-33.26.0.1 - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - merge Oracle changes for early load via dracut - enable late load on install for UEK4 kernels marked safe except BDW-79 - set earlymicrocode='no' in virtualized guests to avoid early load...
gettext: double free in default_add_message in read-catalog.c
An issue was discovered in GNU gettext 0.19.8. There is a double free in defaultaddmessage in read-catalog.c, related to an invalid free in pogramparse in po-gram-gen.y, as demonstrated by lt-msgfmt...
Debian DSA-4701-1 : intel-microcode - security update
This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for the Special Register Buffer Data Sampling CVE-2020-0543 , Vector Register Sampling CVE-2020-0548 and L1D Eviction Sampling CVE-2020-0549 hardware vulnerabilities. The microcode update for HEDT and Xe...
Moderate: Red Hat Security Advisory: microcode_ctl security, bug fix and enhancement update
An update for microcodectl is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
samsung-galaxy-y-st-5360-on-iplaygalaxyy.25526.x6.nabble.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184638 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
y-ta.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1184420 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Security fix for the ALT Linux 8 package clamav version 0.102.3-alt1
0.102.3-alt1 built May 28, 2020 Sergey Y. Afonin in task 245886 May 27, 2020 Sergey Y. Afonin - 0.102.3 + CVE-2020-3327 - 0.102.2 only + CVE-2020-3341 - from 0.101 to 0.102.2...