14288 matches found
PT-2023-13768 · Bentley Systems · Microstation Connect
Name of the Vulnerable Software and Affected Versions: Bentley Systems MicroStation Connect versions 10.17.0.209 and prior Description: The issue is a Stack-Based Buffer Overflow that occurs when a malformed design DGN file is parsed. This may allow an attacker to execute arbitrary code...
PT-2023-13997 · Bentley Systems · Microstation Connect
Name of the Vulnerable Software and Affected Versions: Bentley Systems MicroStation Connect versions 10.17.0.209 and prior Description: The issue is related to an Out-of-Bounds Read that occurs when parsing DGN files. This may allow an attacker to crash the product, disclose sensitive information...
CVE-2022-46081
In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product...
CVE-2022-46081
In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product...
Design/Logic Flaw
DISPUTED In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product...
CVE-2022-46081
In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product...
PT-2023-14809 · Garmin · Garmin Connect
Name of the Vulnerable Software and Affected Versions: Garmin Connect version 4.61 Description: The issue concerns the exposure of private personal information through the LiveTrack API when a LiveTrack session is terminated. This problem is noted in Garmin Connect, where ending a session does no...
CVE-2022-46081
In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information. NOTE: this is disputed by the vendor because the LiveTrack API service is not a customer-controlled product...
Garmin Connect 信息泄露漏洞
Garmin Connect is a platform for staying in shape, providing ways to get a full workout and keep a close eye on your health. An information disclosure vulnerability exists in Garmin Connect version 4.61, which stems from the fact that terminating a LiveTrack session does not prevent the LiveTrack...
CVE-2022-46081
CVE-2022-46081 concerns Garmin Connect 4.61, where terminating a LiveTrack session does not stop exposure of private information via the LiveTrack API. The root cause is described as continued exposure after session end; vendor disputes that the LiveTrack API is customer-controlled. Public detail...
PT-2025-54126
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists when tree connecting to the Inter-Process Communication IPC. Access to TCP Server Info::hostname is not adequately protected when building the IPC tree name,...
An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.
...
The vulnerability of the SMB subsystem in Linux operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the SMB subsystem fs/ksmbd/smb2misc.c in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure during the processing of SMB2TREECONNECT...
CVE-2022-41579
There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band...
CVE-2022-41579
There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band...
[SECURITY] Fedora 36 Update: mod_auth_openidc-2.4.12.2-1.fc36
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...
[SECURITY] Fedora 37 Update: mod_auth_openidc-2.4.12.2-1.fc37
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server...
Fedora: Security Advisory for mod_auth_openidc (FEDORA-2022-e139408490)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for mod_auth_openidc (FEDORA-2022-6beaa3bd0c)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...