12982 matches found
Mitsubishi Electric GOT and Tension Controller (CVE-2021-20589)
Buffer access with incorrect length value vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.38.000, GT25 model communication driver versions 01.19.000 through 01.38.000, GT23 model communication driver versions 01.19.000 through 01.38.000 and GT21 model...
PT-2023-28413 · Samsung · Samsung Account
Name of the Vulnerable Software and Affected Versions: Samsung Account versions prior to 14.5.00.7 Description: The issue concerns the use of implicit intent for sensitive communication in the startAgreeToDisclaimerActivity function within Samsung Account. This allows attackers to access arbitrar...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from information disclosure in the Qualcomm IPC when reading values from shared memory in a VM...
ALSA-2023:6482 Moderate: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c/librabbitmq: Insecure credentials submission CVE-2023-35789 For more details about the security issue...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
CVE-2022-48193
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
Code injection
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication SSL...
PT-2023-15612 · Softing · Smartlink Sw-Ht
Name of the Vulnerable Software and Affected Versions: Softing smartLink SW-HT versions prior to 1.30 Description: The issue concerns the use of weak ciphers during secure communication via SSL in the affected software. This could potentially compromise the security of the communication...
Macvim Security Vulnerabilities
Vim is a cross-platform text editor. A security vulnerability exists in previous versions of Macvim 178 that stems from the use of an insecure inter-process communication mechanism, which may lead to privilege escalation...
Malicious code in mux-spaces-broadcast-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01c1c36f1f5a800c8875fff926e7201ac81769be7b9484aa1360c3cb2118ae00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8437 Malicious code in ch-frontend-assignment (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The...
Malicious code in gatsby-starter-gitlab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc23995a775ff33fc2732574cfd95b0d8efee1cdcadd229b67acde3123fac5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8435 Malicious code in tvaultuiv2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5ffe7dc0907e6c0a6e1fc443558d8a6117e991d3b392e45eded0a16a22388fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-44569
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication...
CVE-2022-44569
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication...
Authentication flaw
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication...
[SECURITY] Fedora 39 Update: mcrouter-0.41.0.20231016-1.fc39
Mcrouter pronounced mc router is a memcached protocol router for scaling memcached deployments. Because the routing and feature logic are abstracted from the client in mcrouter deployments, the client may simply communicate with destination hosts through mcrouter over a TCP connection using...
CVE-2022-44569
Summary: CVE-2022-44569 affects Ivanti Automation (Ivanti Automation Manager) with an IPC-based authentication bypass. Root cause: insecure inter-process communication that allows a locally authenticated, low-privilege attacker to bypass authentication. Impact: local elevation of access due to by...
