CVE-2021-26281

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

CVE-2021-26281

The CVE-2021-26281 entry relates to the vivo Alarm clock module, where some parameters are improperly stored, leaking sensitive information. The available documents identify the affected component as the alarm clock module and describe the root cause as improper storage of certain parameters, res...

CVE-2021-26281 Information disclosure vulnerability in Alarm clock module

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

PT-2024-10901

Name of the Vulnerable Software and Affected Versions Alarm clock module affected versions not specified Description The issue concerns the improper storage of some parameters within the alarm clock module, leading to the leakage of sensitive information. Recommendations At the moment, there is n...

vivo Alarm clock 安全漏洞

vivo Alarm clock is a cell phone alarm clock module from the Chinese company Vivo. A security vulnerability exists in vivo Alarm clock, which originates from improper storage of some parameters of the alarm clock module, leaking some sensitive information...

CVE-2021-26281: Exposure of Sensitive Information to an Unauthorized Actor

Some parameters of the alarm clock module are improperly stored, leaking some sensitive information...

CVE-2024-42407

CVE-2024-42407 affects Gallagher Command Centre Server: the Alarm Transmitter feature can cause insertion of sensitive information into log files, enabling an authenticated Operator to view restricted data. Affected versions are Command Centre Server 9.10 before 9.10.2149 (MR4), 9.00 before 9.00....

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from the insertion of sensitive information into a log file during the Alarm Sender...

CVE-2024-42407: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File CWE-532 in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security sensitive information to which they have not been granted access. This issue affects: Command Centre Server 9.10 prior to...

CVE-2024-53097

In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false alarm in dokrealloc This patch addresses an issue introduced by commit 1a83a716ec233 "mm: krealloc: consider spare memory for GFPZERO" which causes MTE Memory Tagging Extension to falsely report a...

CVE-2024-53097

CVE-2024-53097 affects the Linux kernel mm/krealloc path. Connected sources confirm a patch for mm: krealloc: Fix MTE false alarm in __do_krealloc, addressing a false KASAN/MTE slab-out-of-bounds error triggered when zeroing spare memory in __do_krealloc. Root cause: memory tagging mismatch due t...

CVE-2024-53097 mm: krealloc: Fix MTE false alarm in __do_krealloc

In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false alarm in dokrealloc This patch addresses an issue introduced by commit 1a83a716ec233 "mm: krealloc: consider spare memory for GFPZERO" which causes MTE Memory Tagging Extension to falsely report a...

CVE-2024-53097

In the Linux kernel, the following vulnerability has been resolved: mm: krealloc: Fix MTE false alarm in dokrealloc This patch addresses an issue introduced by commit 1a83a716ec233 "mm: krealloc: consider spare memory for GFPZERO" which causes MTE Memory Tagging Extension to falsely report a...

PT-2024-35560

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.65 Description The issue is related to a false alarm in the Memory Tagging Extension MTE caused by a mismatch between the pointer tag and the memory tag when zeroing out spare memory in do krealloc. This...

Unspecified Vulnerability in Siemens InterMesh Subscriber Devices (CNVD-2024-41573)

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. A security vulnerability exists in Siemens InterMesh Subscriber Devices, which can be exploited by an attacker to write arbitrary files to the web server's DocumentRoot directory...

Unspecified Vulnerability in Siemens InterMesh Subscriber Devices

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. A security vulnerability exists in Siemens InterMesh Subscriber Devices due to a web server in the affected devices that does not authenticate a GET request that executes a specifi...

Siemens InterMesh Subscriber Devices Incorrect Privilege Assignment Vulnerability

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. An incorrect privilege assignment vulnerability exists in Siemens InterMesh Subscriber Devices, which is due to an affected device containing a SUID binary file that can be exploit...

Siemens InterMesh Subscriber Devices Operating System Command Injection Vulnerability

InterMesh is a wireless alarm reporting system that uses mesh wireless network technology to transmit alarm signals. An operating system command injection vulnerability exists in Siemens InterMesh Subscriber Devices, which can be exploited by an attacker to execute arbitrary code with root...

Cyber threats to shipping explained

TL;DR Modern vessels are becoming increasingly connected. While it is unlikely that hackers could fully control a container ship remotely, they may be able to disrupt systems such as the Power Management System PMS, leading to blackouts and associated loss of propulsion and steering. Although...