PT-2022-31377

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v5.17.14. The actual impact and attack...

PT-2022-31029

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v5.18.3. The actual impact and attack...

PT-2022-31045

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.5 through v5.18.3 Description The issue is related to a possible null pointer dereference in the cadence nand dt probe function. This problem was introduced in version v5.5 and is fixed in version v5.18.3. The actual...

PT-2022-31870

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.12 through 5.10.120 Description A refcount leak was discovered in the pfuze parse regulators dt function. The issue was introduced in version v3.12 and is fixed in Linux Kernel version v5.10.121. Recommendations For Lin...

dt-law.co.il Cross Site Scripting vulnerability OBB-2686933

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-44746

UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can acce...

Information disclosure

UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can acce...

CVE-2021-44746

UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can acce...

CVE-2021-44746

CVE-2021-44746 affects NEC UNIVERGE IP Phone DT series and related tools: UNIVERGE DT 820 (3.2.7.0 and earlier), DT 830 (5.2.7.0 and earlier), DT 930 (2.4.0.0 and earlier), IP Phone Manager (8.9.1 and earlier), Data Maintenance Tool for DT900 (5.3.0.0 and earlier) and DT800 (4.2.0.0 and earlier)....

CVE-2021-44746: Undefined Security Weakness

UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prior, Data Maintenance Tool for DT900 Series V5.3.0.0 and prior, Data Maintenance Tool for DT800 Series V4.2.0.0 and prior allows a remote attacker who can acce...

Mageia: Security Advisory (MGASA-2014-0390)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla! DT Register SQL Injection Vulnerability

DT Register is a booking management component used in Joomla! DT Register version 3.2.7, an open source content management system CMS developed by the Open Source Matters team, which provides RSS feeds, site search, etc. A SQL injection vulnerability exists in Joomla! A remote attacker can view,...

UNIVERGE DT Series vulnerable to missing encryption of sensitive data

Overview UNIVERGE IP Phone DT Series and PC tools for DT Series maintainers IP Phone Manager and Data Maintenance Tool provided by NEC Platforms, Ltd. contain a missing encryption vulnerability CWE-311. NEC Platforms, Ltd. reported this vulnerability to IPA to notify users of its solutions throug...

PT-2021-28773

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns access to a variable DT array in the sx9310 driver. It was introduced in version v5.11 and fixed in version v5.12.4. The actual impact and attack plausibility have not yet...

PT-2021-24779

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns access to a variable DT array in the sx9310 driver. It was introduced in version v5.11 and fixed in version v5.12.4. The actual impact and attack plausibility have not yet...

dt-24.ru Cross Site Scripting vulnerability OBB-1476274

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Dell EMC ECS Exposes Resource Vulnerability

Dell EMC Elastic Cloud Storage ECS is a suite of scalable, software-defined object storage solutions from Dell, USA. An exposed resource vulnerability exists in Dell EMC ECS versions prior to 3.5, which arises from improper management of system resources e.g., memory, disk space, files, etc. by a...

dt-ssl.com Cross Site Scripting vulnerability OBB-1277110

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

dt-shop.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1157882 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Unspecified Vulnerability in XIAOMI AI speaker MDZ-25-DT

Xiaomi AI speaker MDZ-25-DT is a smart speaker device from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in XIAOMI AI speaker MDZ-25-DT version 1.34.36 and 1.40.14. An attacker can exploit this vulnerability by sending a UART interface to obtain a root shell, read the...