545 matches found
wireguard: netlink: access device through ctx instead of peer
...
The vulnerability of the microprogrammed software of AVTECH AVM1203 lies in the lack of measures taken to neutralize the special elements used in the operating system commands. This allows a intruder to gain full access to the device.
The vulnerability of the IP camera software of AVTECH AVM1203 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to gain full access to the device...
PT-2024-25533 · Cosy+ · Cosy+
Name of the Vulnerable Software and Affected Versions: Cosy+ versions 21.x below 21.2s10 Cosy+ versions 22.x below 22.1s3 Description: The issue is related to code injection due to improper parameter blacklisting. This can be exploited with local network access. The estimated number of potentiall...
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to resource management errors, allows attackers to gain access to the device.
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to resource management errors. Exploiting this vulnerability can allow an attacker to gain access to the device by using pre-set credentials...
Citrix Endpoint Management: Gateway issues Guide
Introduction Configuring Citrix Gateway with XenMobile establishes the necessary authentication for remote device access to the internal network. This setup allows mobile applications to securely access corporate servers, facilitating seamless business operations from any location and ensuring th...
USN-6871-1 linux-hwe-5.15 vulnerabilities
It was discovered that the ATA over Ethernet AoE driver in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2023-6270 It was discovered that the Atheros 802.11ac...
USN-6870-1 linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-oracle, linux-oracle-5.15 vulnerabilities
It was discovered that the Intel Data Streaming and Intel Analytics Accelerator drivers in the Linux kernel allowed direct access to the devices for unprivileged users and virtual machines. A local attacker could use this to cause a denial of service. CVE-2024-21823 Several security issues were...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a line of high-end office multifunction printers from Toshiba Japan. A security vulnerability exists in Toshiba e-STUDIO, which arises from the fact that certain information is stored unencrypted and could therefore be stolen by a third party with access to the multifunction...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO, which originates from a cross-site scripting vulnerability in the web management program TopAccess that could allow a third party with access to the...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...
Toshiba e-STUDIO Security Vulnerability
Toshiba e-STUDIO is a series of high-end office multifunction printers from Toshiba, Japan. A security vulnerability exists in Toshiba e-STUDIO that originates when some authentication information between programs within the multifunction device is written directly into the program, so that this...
CVE-2024-27814
CVE-2024-27814 affects watchOS prior to 10.5, specifically the Phone component. Root cause is described as an issue with state management that could allow a person with physical access to view contact information from the lock screen. Impact is limited to exposure of contact data on the lock scre...
GHSA-49JC-R788-3FC9 gix refs and paths with reserved Windows device names access the devices
Summary On Windows, fetching refs that clash with legacy device names reads from the devices, and checking out paths that clash with such names writes arbitrary data to the devices. This allows a repository, when cloned, to cause indefinite blocking or the production of arbitrary message that...
PT-2024-3457 · Siemens · Simatic Cn 4100
Name of the Vulnerable Software and Affected Versions: SIMATIC CN 4100 versions prior to V3.0 Description: A vulnerability has been identified in the SIMATIC CN 4100 device, which contains undocumented users and credentials. This issue is related to the use of pre-installed credentials. An attack...
PT-2024-31076 · Cemipark · Cemipark
Name of the Vulnerable Software and Affected Versions: CemiPark software versions 4.5 through 5.03 Description: The access control in CemiPark software stores integration credentials, such as FTP or SIP, in plain-text. An attacker who gains unauthorized access to the device can retrieve clear tex...
kernel: vmwgfx: NULL pointer dereference in vmw_cmd_dx_define_query
A NULL pointer dereference issue was found in the Linux kernel's vmwgfx driver in vmwcmddxdefinequery. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl on the resulting file descriptor, to crash the system, causi...
CVE-2024-32051
Insertion of sensitive information into log file issue exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may obtain sensitive information...
PT-2024-7900 · Okta · Okta Verify
Name of the Vulnerable Software and Affected Versions: Okta Verify versions 5.0.2 through 5.3.2 Description: The issue is related to the Okta Device Access feature in the Okta Verify agent for Windows, which provides access to the OktaDeviceAccessPipe. This allows attackers on a compromised devic...