The vulnerability of the microprogrammed software of the PowerFlex 527 variable frequency converter, related to insufficient verification of input data, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software of the PowerFlex 527 variable frequency converter is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker operating remotely to cause malfunctions in the device’s operation...

The vulnerability of the SendMail SMTP server’s software lies in the insufficient verification of data authenticity. This allows attackers to bypass security measures and send emails with fake MAIL FROM addresses.

The vulnerability of the SendMail SMTP server software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms and send emails with fake MAIL FROM addresses...

The vulnerability of the application software interface of the Cisco Meeting Server platform allows a perpetrator to cause a service failure.

The vulnerability of the application software interface of the Cisco Meeting Server platform is related to deficiencies in the mechanism for verifying input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2023-52377

Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access...

The vulnerability of the System Management Mode (SMM) implementation of AMD microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PT-2024-12380 · Qualcomm · Snapdragon +74

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cryptographic problem in the automotive sector, specifically when unwrapping the key secs2d and verifying it with RPMB data. No...

The vulnerabilities of HCI (Host Controller Interface) and SCI interfaces, which operate according to the IEC 60870-5-104 standard, and are found in Hitachi Energy RTU500 programmable logic controllers, allow a perpetrator to trigger a service failure.

The vulnerabilities of HCI Host Controller Interface and SCI interfaces, which operate according to the IEC 60870-5-104 standard, in Hitachi Energy RTU500 programmable logic controllers, are related to insufficient verification of input data. Exploiting these vulnerabilities can allow an attacker...

CVE-2023-44099

Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption...

CVE-2023-44099

Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption...

Design/Logic Flaw

Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption...

CVE-2023-44099

CVE-2023-44099 concerns a vulnerability in a Huawei HarmonyOS kernel module where a data verification (checksum) error can cause WLAN interruption. The connected sources indicate a kernel-module level issue with data verification, but do not provide explicit affected versions, concrete exploitati...

CVE-2023-44099

Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption...

PT-2023-29099 · Unknown · Kernel Module

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to data verification errors in the kernel module. Successful exploitation may cause WLAN interruption. Recommendations: At the moment, there is no information abo...

The vulnerability of the microprogrammed protection software of the SCHWEitzer Engineering Laboratories SEL-411L phase-change relay arises due to insufficient verification of input data. This vulnerability allows a perpetrator to disclose the protected information.

The vulnerability of the microprogrammed protection software of the Schweitzer Engineering Laboratories SEL-411L phase-change relay exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the ated_tp microprogramming software for TP-Link TL-WR841N routers allows a hacker to execute arbitrary code.

The vulnerability of TP-Link TL-WR841N router’s atedtp microprogramming system exists due to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Design/Logic Flaw

Insufficient Verification of Data Authenticity vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules and MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to reset the memory of the products to factory default state and cause denial-of-service DoS...

The vulnerability of MediaTek’s microprogramming software components in the GPS module allows hackers to enhance their privileges.

The vulnerability of the GPS component of MediaTek’s microprogramming software chips is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Watch out, this LastPass email with "Important information about your account" is a phish

The consequences of last year's LastPass breach continue to be felt, with the latest insult to users coming in the form of a highly convincing phishing email. Although the "unauthorized party" that compromised LastPass users' data was able to steal password vaults, it's likely that they are havin...

Design/Logic Flaw

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typically contain a "Hash: ..." header declaring the hash algorit...

The vulnerability of the keyinstall component in MediaTek’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the keyinstall component in MediaTek’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to cause malfunctions in the system...