154 matches found
CVE-2022-36301
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password...
Default credentials
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password...
CVE-2022-36302
The CVE-2022-36302 entry concerns a file path traversal-like vulnerability in BF-OS versions 3.00–3.83 . The issue allows an attacker to manipulate the file path to access other resources that may contain sensitive information. Affected component is the BF-OS path handling; the root cause is impr...
CVE-2022-36302
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information...
CVE-2022-36301
CVE-2022-36301 affects BF-OS versions 3.x up to 3.83. The vulnerability arises from not enforcing strong passwords, enabling a remote attacker to brute-force the device password. Documented impact is high for confidentiality and availability, with the base CVSS indicating network access, low comp...
CVE-2022-36301
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password...
PT-2022-23297 · Bf-Os · Bf-Os
Name of the Vulnerable Software and Affected Versions: BF-OS versions 3.00 through 3.83 Description: The issue allows an attacker to modify the file path, potentially accessing different resources that may contain sensitive information. Recommendations: For BF-OS versions 3.00 through 3.83,...
CVE-2022-36302: Improper Restriction of Names for Files and Other Resources
File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information...
CVE-2022-36301: Weak Password Requirements
BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password...
PT-2022-23296 · Bf-Os · Bf-Os
Name of the Vulnerable Software and Affected Versions: BF-OS versions 3.x up to and including 3.83 Description: The issue allows a remote attacker to brute-force the device password due to the lack of strong password enforcement. Recommendations: For BF-OS versions 3.x up to and including 3.83,...
Malicious code in @bf-ui-library/richtext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f8eca6486a986ffa6a1485a09fcd040b4b868cf477e36a31ffaf282abbe266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-118 Malicious code in @bf-ui-library/richtext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f8eca6486a986ffa6a1485a09fcd040b4b868cf477e36a31ffaf282abbe266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Google Chrome BFCache DoS
The vulnerability of Google Chrome’s BFCache component relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created web page...
agriculture.bf Cross Site Scripting vulnerability OBB-2334870
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-4062
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2021-4062
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-4062
Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
bf-renpang.com Cross Site Scripting vulnerability OBB-2138650
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...