Lucene search
+L

199 matches found

BDU FSTEC
BDU FSTEC
•added 2023/07/06 12:00 a.m.•14 views

The vulnerability in the embedded software of Netgear R6250 lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger buffer overflows.

The vulnerability in the embedded software of Netgear R6250 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger buffer overflows remotely...

10CVSS7.9AI score0.13746EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2023/06/28 12:00 a.m.•23 views

Dell BIOS Buffer Overflow Vulnerability

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS. Attackers have exploited the vulnerability to cause a denial of service on the system...

4.6CVSS6.8AI score0.00264EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/06/23 12:00 a.m.•13 views

Dell BIOS 缓冲区错误漏洞

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. A security vulnerability exists in Dell BIOS. Attackers have exploited the vulnerability to cause a denial of service on the system...

4.6CVSS6.6AI score0.00264EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/23 12:00 a.m.•14 views

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. Dell BIOS has an input validation error vulnerability that stems from incorrect input validation. An attacker could exploit this vulnerability to modify UEFI variables...

6.7CVSS6.6AI score0.00168EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/05/10 12:00 a.m.•41 views

ABB Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12262)

Wind River is the provider of a real time operating system called VxWorks which is used in the embedded software of the PM 877 Controller. Wind River has announced security vulnerabilities in the VxWorks TCP/IP stack IPnet and management of memory block size Bad Alloc. The controller PM 877 is...

9.8CVSS9AI score0.04116EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/04/13 12:00 a.m.•13 views

The vulnerability of embedded software developed by Qualcomm, related to copying from buffers without checking the size of the input data, allows a violator to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips lies in the copying of input data from the buffer without checking its size. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS7.7AI score0.00166EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/03/07 12:00 a.m.•17 views

The vulnerability of embedded software developed by Qualcomm, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of embedded software developed by Qualcomm relates to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.5CVSS7.7AI score0.0036EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•12 views

Dell BIOS 缓冲区错误漏洞

The Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from the presence of a heap buffer overflow vulnerability that could be exploited by a local attacker with administrator privileges to perform...

7.1CVSS7.5AI score0.00208EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/12/24 12:00 a.m.•14 views

The vulnerability of the Ethernet interfaces of Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino allows for bypassing the cryptographic signature verification on a USB drive. This enables a perpetrator to load any arbitrary image of the embedded software onto the device.

The vulnerability of the Tofino Xenon Security Appliance, Tofino Argon Security Appliance, and EAGLE 20 Tofino lies in bypassing the cryptographic signature verification on a USB drive. Exploiting this vulnerability allows a malicious actor to download any arbitrary image of the embedded software...

8.3CVSS6.8AI score0.00246EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/12/05 12:00 a.m.•13 views

The vulnerability of the built-in software of the NETGEAR R7000P router, related to buffer overflow vulnerabilities, allows a hacker to trigger a service failure.

The vulnerability of the embedded software of the NETGEAR R7000P router is related to buffer overflow errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through the openvpnpush1 parameter...

10CVSS8.1AI score0.01014EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/05 12:00 a.m.•12 views

The vulnerability of the embedded software of the NETGEAR R7000P router, related to buffer overflow vulnerabilities, allows a hacker to execute arbitrary code.

The vulnerability of the embedded software of the NETGEAR R7000P router is related to buffer overflow errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through the wandns1pri parameter...

10CVSS8.5AI score0.01144EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/05 12:00 a.m.•25 views

The vulnerability of the httpd daemon in the embedded software of the NETGEAR R7000P router allows a hacker to execute arbitrary code.

The vulnerability of the httpd daemon in the NETGEAR R7000P router’s embedded software is related to buffer overflow errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the wandns1sec parameter...

10CVSS8.5AI score0.01014EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/05 12:00 a.m.•15 views

The vulnerability of the embedded software of the NETGEAR R7000P router, related to buffer overflow vulnerabilities, allows a hacker to execute arbitrary code.

The vulnerability of the embedded software of the NETGEAR R7000P router is related to buffer overflow errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through the openvpnserverip parameter...

10CVSS8.5AI score0.01144EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•32 views

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. A security vulnerability exists in Dell BIOS that stems from an incorrect input validation issue...

8.8CVSS7.9AI score0.00208EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/09/30 12:00 a.m.•19 views

The vulnerability of the implementation of content protection functions in Qualcomm’s embedded software allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the content protection implementation in Qualcomm’s embedded software lies in the lack of checks for buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

8.4CVSS7.7AI score0.00124EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/09/30 12:00 a.m.•15 views

The vulnerability of the ION subsystem in Qualcomm’s embedded software architecture allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ION subsystem in embedded Qualcomm chips relates to insufficient validation of input data during command processing. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary code...

6.7CVSS7AI score0.00124EPSS
SaveExploits0References5
CNVD
CNVD
•added 2022/09/15 12:00 a.m.•58 views

Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08767)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which stems from the inclusion of an incorrect null byte neutralization and could be exploited by a locally authenticated administrator...

2.3CVSS2.8AI score0.00182EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/09/12 12:00 a.m.•15 views

The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...

8.4CVSS7.5AI score0.00124EPSS
SaveExploits0References4
Schneier on Security
Schneier on Security
•added 2022/08/26 11:54 a.m.•19 views

Security and Cheap Complexity

Ive been saying that complexity is the worst enemy of security for a long time now. Heres me in 1999. And its been true for a long time. In 2018, Thomas Dullien of Googles Project Zero talked about "cheap complexity." Andrew Appel summarizes: The anomaly of cheap complexity. For most of human...

0.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/06 12:00 a.m.•15 views

PT-2022-4875 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to memory corruption in audio while playing a record, caused by improper list handling in two threads. This is due to an integer overflow in the...

8.4CVSS8.1AI score0.00124EPSS
SaveExploits0References8
Rows per page
Query Builder