aliasrobotics/RVD

#1495

· rvd-bot opened

on Apr 3, 2020

RVD#1494: Not sanitizing filenames in the add_match function in libbb/lineedit.c in BusyBox through 1.27.2 when tab autocompleting filenames

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1494

· rvd-bot opened

on Apr 3, 2020

RVD#1493: CRLF injection vulnerability in Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1493

· glerapic opened

on Apr 3, 2020

RVD#1492: Improper Handling of Unicode Encoding during NFKC normalization on python 2.7.x through 2.7.16 and 3.x through 3.7.2

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1492

· glerapic opened

on Apr 3, 2020

RVD#1491: Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) via a long name.

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1491

· mikekaram opened

on Apr 3, 2020

RVD#1490: procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption which could result in crashes or arbitrary code execution

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1490

· rvd-bot opened

on Apr 3, 2020

RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions

CVE-2020-10267

CWE-311

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1489

· rvd-bot opened

on Apr 3, 2020

RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot

CVE-2020-10266

CWE-353

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1487

· rvd-bot opened

on Apr 3, 2020

RVD#1485: A race condition in util-linux before 2.32.1 in su could be used to kill other processes with root privileges

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1485

· rvd-bot opened

on Apr 3, 2020

RVD#1484: Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free.

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1484

· glerapic opened

on Apr 3, 2020

RVD#1483: The smtplib library in Python 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1483

· glerapic opened

on Apr 3, 2020

RVD#1482: The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules

robot component: Universal Robots Controller

vendor: Universal Robots

vulnerability

#1482

· mikekaram opened

on Apr 3, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

RVD#1495: Universal Robots URCaps execute with unbounded privileges

RVD#1494: Not sanitizing filenames in the add_match function in libbb/lineedit.c in BusyBox through 1.27.2 when tab autocompleting filenames

RVD#1493: CRLF injection vulnerability in Python before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers

RVD#1492: Improper Handling of Unicode Encoding during NFKC normalization on python 2.7.x through 2.7.16 and 3.x through 3.7.2

RVD#1491: Stack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) via a long name.

RVD#1490: procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption which could result in crashes or arbitrary code execution

RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions

RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot

RVD#1485: A race condition in util-linux before 2.32.1 in su could be used to kill other processes with root privileges

RVD#1484: Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free.

RVD#1483: The smtplib library in Python 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails

RVD#1482: The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules

Issues

Search results