PT-2022-28400

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.19.195 through 4.19.227 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential...

PT-2022-28429

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.126 through 5.4.175 Description The issue affects the f sourcesink component in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28528

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.15.18 Description The issue affects the f sourcesink function in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28358

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue affects the USB gadget functionality, specifically the f sourcesink component, where an isoc transfer problem occurs at USB SPEED SUPER PLUS. The actual impact and potential for...

PT-2022-28468

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.10.44 through 5.10.95 Description The issue affects the f sourcesink component in the USB gadget subsystem, specifically impacting isochronous transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility...

PT-2022-28376

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.237 through 4.14.264 Description The issue affects the f sourcesink function in the USB gadget subsystem, specifically with isoc transfer for USB SPEED SUPER PLUS. The actual impact and attack plausibility have not y...

CVE-2021-45444: Undefined Security Weakness

In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument. This occurs because of recursive PROMPTSUBST expansion...

PT-2024-21122

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 6.7.4 Description The issue is related to the printer write function in the Linux kernel, specifically in the drivers/usb/gadget/function/f printer.c file. This function does not properly call usb ep queue, which...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

Design/Logic Flaw

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

CVE-2021-40837

The CVE-2021-40837 issue affects the F-Secure antivirus engine prior to Capricorn update 2022-02-01_01. The vulnerability arises during ACE file decompression, triggering a denial-of-service condition where the scanner service stops. It can be exploited remotely by an attacker, leading to availab...

CVE-2021-40837 Denial-of-Service (DoS) Vulnerability

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

PT-2022-11313

Name of the Vulnerable Software and Affected Versions F-Secure antivirus engine versions before Capricorn update 2022-02-01 01 Description A vulnerability was discovered in the F-Secure antivirus engine, where the decompression of an ACE file causes the scanner service to stop. This issue can be...

CVE-2021-40837: Undefined Security Weakness

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-0101 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the...

F-Secure antivirus engine 安全漏洞

F-secure F-Secure antivirus engine is a security engine from the Finnish company F-Secure F-secure. A security vulnerability exists in F-Secure antivirus engine, which originates from the decompression of an ACE file that causes the scanner service to stop. An attacker can remotely exploit the...

Mitsubishi Electric MELSEC-F Series Null Pointer Dereference (CVE-2021-20596)

NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted...

f-rates.com Cross Site Scripting vulnerability OBB-2344052

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-20613

Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version 1.16 and prior allows a remote unauthenticated attacker to cause a denial-of-service DoS condition in communication...