Zyxel CLI DoS

The vulnerability of the command-line interface CLI of Zyxel network device software implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Insecure Storage of Sensitive Information in Microweber

Microweber prior to version 1.3 does not strip images of EXIF data, exposing information about users' locations, device hardware, and device software...

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

CVE-2021-24046

CVE-2021-24046 describes a logic flaw in Ray-Ban Stories device software that allows certain parameters, notably the video capture duration limit, to be modified through the Facebook View application. Affected are device software versions prior to 2107460.6810.0. The connected sources consistentl...

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

Ray-Ban Stories security vulnerabilities

Ray-Ban Stories is a smart glasses from ray-ban. A security vulnerability exists in Ray-Ban Stories that allows some parameters, such as video capture duration limits, to be modified via the Facebook View application. This issue affects device software versions prior to 2107460.6810.0...

Amazon AWS IoT Device SDK Trust Management Vulnerability

The Amazon AWS IoT Device SDK is a collection of C source files under the MIT Open Source License from Amazon.com, Inc. that can be used in embedded applications to securely connect IoT devices to the AWS IoT Core.It includes an MQTT, JSON parser, and the AWS IoT Device Shadow library. It is...

CVE-2021-22547

In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...

Qualcomm Audio Security Vulnerability

Qualcomm Audio is an audio device software from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Audio that stems from an improper check in header extraction that exceeds restricted memory access...

CVE-2020-3176: Improper Neutralization of Special Elements used in a Command

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability exists because the affected software does not properly sanitize user-supplied input. An...

PT-2020-1827

Name of the Vulnerable Software and Affected Versions Cisco Remote PHY Device Software affected versions not specified Description A vulnerability in the software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root...

CVE-2019-14596

Improper access control in the installer for IntelR Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2019-14596: Undefined Security Weakness

Improper access control in the installer for IntelR Chipset Device Software INF Utility before version 10.1.18 may allow an authenticated user to potentially enable denial of service via local access...

Intel Fixes High-Severity Flaw in Performance Analysis Tool

Intel is warning of a high-severity vulnerability in its performance analysis tool called Intel VTune Profiler. If exploited the flaw allows an adversary to perform a privilege escalation attack, giving them elevated and unauthorized system access to a targeted system. The VTune Profiler, formerl...

PT-2020-1645

Name of the Vulnerable Software and Affected Versions IntelR Chipset Device Software INF Utility versions prior to 10.1.18 Description The issue is related to improper access control in the installer, which may allow an authenticated user to potentially enable denial of service via local access...

Intel Chipset Device Software INF Utility Advisory - Lenovo Support US

Lenovo Security Advisory: LEN-29926 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14596 Summary Description: Intel reported a potential security vulnerability in Intel Chipset Device Software INF Utility which may allow denial of...

Intel Chipset Device Software INF Utility Advisory - Lenovo Support US

No description provided...

Cisco IOS XE IOx Guest Shell Namespace Protection Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An IOx Guest Shell namespace protection vulnerability exists in the file system of Cisco IOS XE. The vulnerability stems from insufficient file permissions. An attacker can exploit this vulnerability by modifyi...

CVE-2019-1839

A vulnerability in Cisco Remote PHY Device Software could allow an authenticated, local attacker to execute commands on the underlying Linux shell of an affected device with root privileges. The vulnerability occurs because the affected software improperly sanitizes user-supplied input. An attack...