41 matches found
PT-2024-15381 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 11.3 through 16.7.6 GitLab versions 16.7.6 through 16.8.3 GitLab versions 16.8.3 through 16.9.1 Description: An authorization bypass vulnerability was discovered in GitLab, allowing an attacker to bypass CODEOWNERS by utilizin...
CVE-2023-22817
Server-side request forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL using another DNS address to point back to the loopback adapter. This could then allow the URL to exploit other vulnerabilities on the local server. This was addressed by fixing D...
PT-2023-8145
Name of the Vulnerable Software and Affected Versions Barracuda ESG Appliance versions 5.1.3.001 through 9.2.1.001 Description The issue is related to a case of arbitrary code execution that resides within a third-party and open-source library named Spreadsheet::ParseExcel, used by the Amavis...
Android 14 - Google Zero Touch (ZrT) Enrollment Issues
Unable to enroll Galaxy devices running Android 14 through zero-touch enrollment. Currently, the following models are affected: Galaxy S22, S23 Galaxy A33, A34, A52s, A53, A54...
CVE-2023-39169
The affected devices use publicly available default credentials with administrative privileges...
PT-2023-5960 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in argument validation in a commandlet. It allows a remote attacker to execute arbitrary code. Approximately 3,643 devices may be affected...
PT-2023-14294 · Arm · Arm Compiler 5 (Ac5) +6
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when the directory containing the installer lacks sufficiently restrictive file permissions, allowing an attacker to modify or replace...
PT-2023-23125 · Unknown · Repetier Server
Name of the Vulnerable Software and Affected Versions: Repetier Server versions prior to 1.4.11 Description: The issue allows directory traversal for reading files that contain credentials. This can be demonstrated by accessing the connectionLost.php file. It is estimated that about 1,766 devices...
Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
Posted by Tim Willis, Project Zero In late 2022 and early 2023, Project Zero reported eighteen 0-day vulnerabilities in Exynos Modems produced by Samsung Semiconductor. The four most severe of these eighteen vulnerabilities CVE-2023-24033, CVE-2023-26496, CVE-2023-26497 and CVE-2023-26498 allowed...
Google Android 竞争条件问题漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from concurrent execution of shared resources in the TEEI driver using incorrect synchronization contention condition. MT6879, MT6885, MT6893, MT6895,...
CVE-2021-45648
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EX6100v2 before 1.0.1.106, EX6150v2 before 1.0.1.106, EX6250 before 1.0.0.146, EX6400 before 1.0.2.164, EX6400v2 before 1.0.0.146, EX6410 before 1.0.0.146, EX6420 before 1.0.0.146, EX7300 before 1.0.2.164,...
CVE-2021-45552
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58, R7500v2 before 1.0.3.48, R7800 before 1.0.2.68, R8900 before 1.0.5.2, R9000 before 1.0.5.2, RAX120 before 1.0.1.108, and XR700 before 1.0.1.20...
BrakTooth 输入验证错误漏洞
BrakTooth is a family of 20 vulnerabilities affecting over 1,400 products based on 13 different Bluetooth devices sold by 11 of the world's leading vendors. An input validation error vulnerability exists in the BrakTooth Business Bluetooth Stack BT, which could lead to a DoS and arbitrary code...
CVE-2021-39245
Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101...
NETGEAR 跨站脚本漏洞
Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. NETGEAR suffers from a cross-site scripting vulnerability that stems from certain NETGEAR devices being affected by a stored cross-site...
Vulnerabilities fixed in Juniper products
Juniper has fixed vulnerabilities in Junos OS, Junos OS Evolved and PTX, QTX, MX, EX9200 and SRX4600 devices. The vulnerabilities potentially enable a malicious party to launch attacks leading to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote...
CVE-2021-22679
The affected product is vulnerable to an integer overflow while processing HTTP headers, which may allow an attacker to remotely execute code on the SimpleLink Wi-Fi MSP432E4 SDK: v4.20.00.12 and prior, CC32XX SDK v4.30.00.06 and prior, CC13X0 SDK versions prior to v4.10.03, CC13X2 and CC26XX SDK...
PT-2021-5342
Name of the Vulnerable Software and Affected Versions Kaseya VSA versions prior to 9.5.7 Description The issue concerns a credential disclosure problem in Kaseya VSA, which was exploited in the wild in July 2021. By default, Kaseya VSA on-premise offers a download page at the URL...