CVE-2023-30706

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...

CVE-2023-1765

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akbim Computer Panon allows SQL Injection. This issue affects Panon: before 1.0.2...

SUSE CVE-2018-16391

Several buffer overflows when handling responses from a Muscle Card in musclelistfiles in libopensc/card-muscle.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2022-43762

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

UBUNTU-CVE-2021-40695

It was possible for a student to view their quiz grade before it had been released, using a quiz web service...

PT-2022-21817 · Samsung · Knoxcustommanagerservice

Name of the Vulnerable Software and Affected Versions: KnoxCustomManagerService versions prior to SMR Jul-2022 Release 1 Description: The issue is related to an improper access control vulnerability. It allows an attacker to call the PowerManaer.goToSleep method, which is protected by system...

CVE-2022-30724

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device...

CVE-2022-30711

Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-30719

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash...

CVE-2022-27835

Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write...

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity...

PT-2022-11304 · Alt Linux · Alt Linux

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows a student to view their quiz grade before it has been released, utilizing a quiz web service. No information is provided about the...

Open Policy Agent 安全漏洞

Open Policy Agent is an open source, general-purpose policy engine that enables uniform, context-aware policy enforcement across the stack. A security vulnerability exists in Open Policy Agent OPA Gatekeeper prior to 3.7.0, which stems from an error handling concurrency that sometimes leads to...

pajbot 跨站请求伪造漏洞

pajbot is a software application. A twitch chatbot. A cross-site request forgery vulnerability exists in versions prior to Pajbot 1.52, which stems from a WEB application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit the vulnerability to...

CVE-2019-3733

The vulnerability CVE-2019-3733 affects RSA BSAFE Crypto-C Micro Edition all versions before 4.1.4, due to three Improper Clearing of Heap Memory Before Release (Heap Inspection) issues. This could allow a remote attacker to extract sensitive data left in memory. Mitigation: upgrade to 4.1.4 or l...

opensc: Buffer overflow handling string concatention in tools/util.c:util_acl_to_str()

A buffer overflow when handling string concatenation in utilacltostr in tools/util.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supply crafted smartcards to cause a denial of service application crash or possibly have unspecified other impact...

Teltonika RUT9XX Authentication Vulnerability

Teltonika RUT9XX LuCI is a LET router product from Teltonika Lithuania. A security vulnerability exists in /cgi-bin/luci in Teltonika RTU9XX R00.05.00.5 prior to version R31.04.89. An attacker could exploit this vulnerability to crack user passwords...

CVE-2019-0127

Logic error in the installer for IntelR OpenVINOTM 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access...

CVE-2019-6533

Registers used to store Modbus values can be read and written from the web interface without authentication in the PR100088 Modbus gateway versions prior to Release R02 or Software Version 1.1.13166...

OpenSC Double Release Vulnerability (CNVD-2019-28620)

OpenSC is an open source smart card tool and middleware. A double-release vulnerability exists in the 'scfilesetsecattr' function of the libopensc/sc.c file in versions of OpenSC prior to 0.19.0-rc1. An attacker could exploit this vulnerability to cause a denial of service application crash with...