Archive
16 June 2020
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Medium 5.9
IBM MQ and MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 C are vulnerable to a denial of service attack due to …
-
Unscored —
On the Cypress CYW20735 evaluation board, any data that exceeds 384 bytes is copied and causes an overflow. This is bec…
-
Unscored —
This is an unbounded write into kernel global memory, via a user-controlled buffer size.Product: AndroidVersions: Andro…
-
Unscored —
In crus_sp_shared_ioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the siz…
-
Unscored —
Function abc_pcie_issue_dma_xfer_sync creates a transfer object, adds it to the session object then continues to work w…
-
Unscored —
In crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds write due to a missing bounds check. …
-
Medium 5.3
Beckhoff: Etherleak in TwinCAT RT network driver
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are n…
-
Critical 9.8
Expression Language Injection in Netflix Conductor
Netflix Titus uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data i…
-
Unscored —
Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2…
-
Unscored —
Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions…
-
Unscored —
Cross Site Scripting (XSS) vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, Affecting v…
-
Unscored —
I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions …