14551 matches found
Qualcomm Memory Use After Release
The vulnerability of embedded software developed for Qualcomm chips lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
Rockwell Automation Micrologix XSS
The vulnerability of the embedded web server software used in Rockwell Automation’s Micrologix 1100 and 1400 programmable logic controllers is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripti...
Qualcomm Pointer Shift DoS
The vulnerability of embedded software developed by Qualcomm relates to the pointer being moved beyond the allocated memory space. Exploiting this vulnerability could allow an attacker to cause a system failure...
Qualcomm Execution Outside Buffer Disclosure
The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...
Qualcomm Execution Outside Buffer Disclosure
The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...
Qualcomm Pointer Shift DoS
The vulnerability of embedded software developed by Qualcomm relates to the pointer being moved beyond the allocated memory space. Exploiting this vulnerability could allow an attacker to cause a system failure...
Qualcomm Embedded Software Array Indexing
The vulnerability of microprogramming software in embedded Qualcomm chips is related to unverified array indexing. Exploiting this vulnerability can allow attackers to influence the integrity, accessibility, and confidentiality of the protected information...
Area Comparison of CHERIoT and PMP in Ibex
Memory safety is a critical concern for modern embedded systems, particularly in security-sensitive applications. This paper explores the area impact of adding memory safety extensions to the Ibex RISC-V core, focusing on physical memory protection PMP and Capability Hardware Extension to RISC-V...
Important: java-1.8.0-amazon-corretto
Issue Overview: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...
MAL-2025-191888 Malicious code in telegramdoxing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4cdffd265ab7e5d199258a068bf6c251370ae931fc905109bd2fb659cd7d9114 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...
Malicious code in telegramdoxing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4cdffd265ab7e5d199258a068bf6c251370ae931fc905109bd2fb659cd7d9114 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...
BRS_netgear_success.html Component Data Compromise
The vulnerability of the BRSnetgearsuccess.html component of the NETGEAR WNR2000v5 router’s embedded software is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protect...
ATEN LCD KVM over IP Switch CL5708IM has security vulnerabilities
ATEN LCD KVM over IP Switch CL5708IM is an 8-port IP KVM switch with LCD screen from China's ATEN Automation ATEN that supports remote BIOS-level device management. A security vulnerability exists in the ATEN LCD KVM over IP Switch CL5708IM, which originates from a heap buffer overflow and could...
Qualcomm Memory Use After Free
The vulnerability of microprogramming software in embedded Qualcomm chips is related to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
WordPress plugin weMail has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
CVE-2025-47540: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs weMail wemail allows Retrieve Embedded Sensitive Data.This issue affects weMail: from n/a through = 1.14.13...
PT-2025-54647
Уязвимость прошивки WLAN микропрограммного обеспечения встраиваемых плат Qualcomm связана с использованием функции assert или похожего оператора. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании при обработке специально сформированного...
PT-2025-54645
Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm вызвана переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию при обработке пакета с недопустимой длиной заголовка на основе стандарта EAVB BE...
DEBIAN-CVE-2025-37781
In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and the EC driver are built-in, the EC parent device will not be found, leading to NULL pointer dereference. That can also be reproduced by...
UBUNTU-CVE-2025-37781
In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and the EC driver are built-in, the EC parent device will not be found, leading to NULL pointer dereference. That can also be reproduced by...