Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in avrcparsct.cc in avrcctrlparsvendorrsp, due to a lack of boundary checking. an out-of-bounds read may occur. An attacker could exploit this vulnerability to cause a remote...

CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Improper access control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456

CVE-2021-27456 affects Philips Gemini PET/CT Family software. The vulnerability involves storage of sensitive data on a removable media device that lacks built-in access control, enabling potential exposure of patient information if media is accessed by unauthorized parties. Reported CVSS v3 base...

PT-2022-9825

Name of the Vulnerable Software and Affected Versions Philips Gemini PET/CT family software affected versions not specified Description The software stores sensitive information in a removable media device without built-in access control. Recommendations At the moment, there is no information abo...

CVE-2021-27456: Storage of Sensitive Data in a Mechanism without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Oil/Gas Cybersecurity: Halt Critical Operation Attacks

Trend Micro has released a technical report on how the oil and gas industry can gain situational awareness across OT, IT and CT...

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices are affected by CVE-2021-46108 due to a Cross-Site Scripting (XSS) vulnerability in the maintenance configuration password page, triggered via the username parameter. The issue is documented across multiple sources (NVD/CVE, CNVD) as XSS that enables access to...

CVE-2021-46108: Improper Neutralization of Input During Web Page Generation

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

PT-2022-1649

Name of the Vulnerable Software and Affected Versions D-Link DSL-2730E CT-20131125 Description The issue allows for cross-site scripting XSS attacks via the username parameter to the password page in the maintenance configuration. This is due to a lack of protection measures for the web page...

ctrentalcenter.com Cross Site Scripting vulnerability OBB-2361799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

UVI-2021-1002318 net/mlx5e: CT, Fix multiple allocations and memleak of mod acts

net/mlx5e: CT, Fix multiple allocations and memleak of mod acts This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

PT-2021-8153

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the net/mlx5e component of the Linux kernel, specifically with the CT clear action offload. When a flow includes encap action, a neigh update event can...

ctprintsticker.com Improper Access Control vulnerability OBB-2200304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-11404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the netfilter conntrack module in the Linux kernel. Syzbot was able to trigger a warning by running two scripts in parallel, changing conntrack hash sizes...

Command injection

Certain MOXA devices allow Authenticated Command Injection via /forms/webimportTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3,...

CVE-2021-39278

Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3...

CVE-2021-39279

Certain MOXA devices allow Authenticated Command Injection via /forms/webimportTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3,...

CVE-2021-39279: Improper Neutralization of Special Elements used in an OS Command

Certain MOXA devices allow Authenticated Command Injection via /forms/webimportTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3,...