CVE-2023-21635

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

Memory corruption

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2023-21635

CVE-2023-21635 shows a memory corruption issue in the Data Network Stack & Connectivity when a SIM is detected during telephony. Multiple sources describe this as a buffer copy without size checking in Qualcomm closed-source components, leading to potential impact on confidentiality, integrity, a...

PT-2023-18298 · Qualcomm · Snapdragon +50

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a memory corruption problem in the Data Network Stack & Connectivity component when a SIM card is detected on the telephony system...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. The Qualcomm Chipsets have a security vulnerability that stems from a memory corruption issue in Network Stack and Connectivity when a SIM card is detected in a phone call...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2022-46408

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

Design/Logic Flaw

Ericsson Network Manager ENM, versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager NCM where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

CVE-2023-35830

STW TCG-4 Connectivity Module (DeploymentPackage_v3.03r0-Impala, DeploymentPackage_v3.04r2-Jellyfish) and TCG-4lite Connectivity Module (DeploymentPackage_v3.04r2-Jellyfish) contain a vulnerability that allows an attacker to gain full remote access with root privileges without authentication, ena...

CVE-2023-35830

STW aka Sensor-Technik Wiedemann TCG-4 Connectivity Module DeploymentPackagev3.03r0-Impala and DeploymentPackagev3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackagev3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for...

PT-2023-25334 · Stw · Stw Tcg-4 Connectivity Module

Name of the Vulnerable Software and Affected Versions: STW TCG-4 Connectivity Module versions 3.03r0-Impala through 3.04r2-Jellyfish STW TCG-4lite Connectivity Module version 3.04r2-Jellyfish Description: The issue allows an attacker to gain full remote access with root privileges without the nee...

Security Bulletin: A vulnerability in the Oracle Data Provider may affect IBM Robotic Process Automation and result in an attacker gaining elevated privileges (CVE-2023-21893).

Summary Oracle Data Provider is used by IBM Robotic Process Automation as part of SQL Server database connectivity. CVE-2023-21893. Vulnerability Details CVEID:CVE-2023-21893 DESCRIPTION: Oracle Database Server could allow a remote attacker to gain elevated privileges on the system, caused by an...

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. An arbitrary file read vulnerability exists in the Apache Airflow ODBC Provider and MSSQL Provider, which stems from the fact that getsqlalchemyconnection can...

Scanner-and-Patcher - A Web Vulnerability Scanner And Patcher

This tools is very helpful for finding vulnerabilities present in the Web Applications. A web application scanner explores a web application by crawling through its web pages and examines it for security vulnerabilities, which involves generation of malicious inputs and evaluation of application'...

The vulnerability of the Microsoft ODBC operating system driver allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft ODBC operating system driver for Windows is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver that originates from allowing remote code execution and affects the...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft ODBC Driver that stems from the presence of a remote code execution...