11695 matches found
Adobe InCopy Font Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InCopy. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...
Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe InDesign. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of...
Fedora: Security Advisory for php (FEDORA-2023-5732365005)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-42268
Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...
[SECURITY] Fedora 36 Update: php-8.1.14-1.fc36
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
CVE-2022-42268
Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...
PT-2023-14071 · Nvidia · Omniverse Kit
Name of the Vulnerable Software and Affected Versions: Omniverse Kit affected versions not specified Description: The issue allows executable Python code to be embedded in Universal Scene Description USD files, which can be used to customize scenes in various applications, including Create,...
[SECURITY] Fedora 37 Update: mbedtls-2.28.2-1.fc37
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...
Zebra Technologies Enterprise Home Screen 安全漏洞
Zebra Technologies Enterprise Home Screen is a free Android app from Zebra Technologies, Inc. provides administrators with an easy way to control access to applications and settings on Zebra devices. A security vulnerability exists in Zebra Technologies Enterprise Home Screen version 4.1.19, whic...
PT-2023-13494 · Zebra +1 · Zebra Enterprise Home Screen +1
Name of the Vulnerable Software and Affected Versions: Zebra Enterprise Home Screen version 4.1.19 Description: An issue was discovered in the software, allowing the installation of unauthorized applications via a downloaded APK by utilizing the embedded Google Chrome application. Recommendations...
KB5022346: Windows 8.1 Embedded and Windows Server 2012 R2 Security Update (January 2023)
The remote Windows host is missing security update 5022346. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...
Discourse 2.9.0.beta14 Information Disclosure Vulnerability (GHSA-q9jp-xv4g-328f)
Discourse is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
buhl-embedded.com Cross Site Scripting vulnerability OBB-3129457
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] Fedora 36 Update: binwalk-2.3.3-1.fc36
Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file...
[SECURITY] Fedora 37 Update: binwalk-2.3.3-1.fc37
Binwalk is a tool for searching a given binary image for embedded files and executable code. Specifically, it is designed for identifying files and code embedded inside of firmware images. Binwalk uses the python-magic library, so it is compatible with magic signatures created for the Unix file...
PT-2023-1617 · Qualcomm · Qualcomm Embedded Platform
Name of the Vulnerable Software and Affected Versions: Powerline Communication Firmware affected versions not specified Qualcomm embedded platform software affected versions not specified Description: The issue is related to memory corruption due to information exposure in Powerline Communication...
PT-2023-1411 · Qualcomm · Qualcomm Embedded Platform
Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform versions affected versions not specified Description: The issue is related to memory corruption in Automotive due to improper input validation. This could potentially allow an attacker to execute arbitrary code...
Understanding the Ecosystem of Smart Cities for the Purpose of Security Testing
Is there a defined ecosystem, similar to what we encountered with the Internet of Things IoT, that can be charted out as it relates to smart city technology and its security implications? While evaluating IoT I struggled with defining what IoT is. I found that there were varying definitions out...
