LS ELECTRIC XBC-DN32U 安全漏洞

LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC Korea.A denial of service vulnerability exists in the LS ELECTRIC XBC-DN32U. The vulnerability stems from the fact that the device will stop functioning when accessing a memory location outside of the communication...

Dell PowerEdge Server BIOS Buffer Overflow Vulnerability

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. Dell PowerEdge Server BIOS buffer overflow vulnerability, which stems from a SMM communication buffer validation error. A local attacker with elevated privileges could exploit this vulnerability to perform arbitrar...

PT-2023-35075 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.7 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically with the pn533 driver. It involves waiting for the completion of out urb in this...

Malicious code in micro-username (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16568c3c83ac6dd335ed741695670ec423436e9f9c4070c7f200d46edc98948b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-34377

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...

Design/Logic Flaw

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...

CVE-2022-34377

Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service...

CVE-2022-34377

Dell PowerEdge BIOS and Dell Precision BIOS are affected by an Improper SMM communication buffer verification vulnerability. A local attacker with high privileges can potentially achieve arbitrary code execution or cause a denial of service by exploiting a flawed SMM buffer validation. The connec...

CodenameOne Pending Intent vulnerability

A vulnerability was found in CodenameOne 7.0.70. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. Upgrading to version 7.0.71 is able to address this issue. The name of the patch is dad49c9ef26a598619fc48d2697151a02987d478...

Information disclosure

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2022-4903 CodenameOne implicit intent for sensitive communication

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2022-4903

CVE-2022-4903 affects CodenameOne 7.0.70. The issue is described as a vulnerability in which manipulation of an unknown function allows use of implicit intents for sensitive communication, with remote-initiated possibility. The root cause is tied to an implicit-intent handling path, the exploitab...

CVE-2022-4903 CodenameOne implicit intent for sensitive communication

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

APsystems Energy Communication Unit 操作系统命令注入漏洞

The APsystems Energy Communication Unit APsystems ECU-R is an energy communication unit from APsystems USA. An operating system command injection vulnerability exists in APSystems ECU-R version 5203. An attacker could exploit this vulnerability to execute arbitrary commands as root using the...

PT-2023-15912 · Unknown · Codenameone

Name of the Vulnerable Software and Affected Versions: CodenameOne version 7.0.70 Description: A vulnerability was found in CodenameOne, classified as problematic. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The...

CVE-2023-21426

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN...

CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition...

CVE-2023-0574

Server-Side Request Forgery SSRF, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communicati...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communicati...

CVE-2023-0574 Server-Side Request Forgery

Server-Side Request Forgery SSRF, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in YugaByte, Inc. Yugabyte Managed allows Accessing Functionality Not Properly Constrained by ACLs, Communicati...