14566 matches found
Unspecified vulnerability in wolfSSL (CNVD-2024-37449)
wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL prior to version 5.7.2, which stems from the use of insufficiently randomized random numbers when generating...
WolfSSL security vulnerabilities
wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in WolfSSL version 5.6.6, which can be exploited by remote attackers to disclose information and elevate privileges via a...
The vulnerabilities we uncovered by fuzzing µC/OS protocol stacks
Hunting for vulnerabilities in industrial environments has become increasingly important as industrial control systems and critical infrastructure face threats from state-sponsored actors and ransomware groups hoping to cash out on million-dollar payments. Fuzzing has long been one of our favorit...
Linux nSVM Heap Buffer Overflow DoS
The vulnerability of the nestedsvmloadcr3 function in the nSVM component of the Linux operating system is related to the assignment of NULL during an embedded migration. Exploiting this vulnerability can allow an attacker to cause a service failure...
wolfSSL security vulnerabilities
wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL prior to version 5.7.2, which stems from the use of insufficiently randomized random numbers when generating...
wolfSSL security vulnerabilities
wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A security vulnerability exists in wolfSSL versions prior to 5.7.0, which can be exploited by an attacker to cause ECDSA key disclosure...
AZL-48277 CVE-2024-43886 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check in resourcelogpipetopologyupdate WHY When switching from "Extend" to "Second Display Only" we sometimes call resourcegetotgmasterforstream on a stream for the eDP, which is disconnected. This leads...
Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass Vulnerability
Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: Version 3.0.0 Revision 1553 Firmware Ver. 4.00 Rev. 1501 Version 3.0.0 Revision 1542 Firmware Ver. 4.00 Rev. 1516 Version 3.0.0 Revision 1530 Firmware Ver...
CVE-2024-43411
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A theoretical vulnerability has been identified in CKEditor 4.22 and above. In a highly unlikely scenario where an attacker gains control over the https://cke4.ckeditor.com domain, they could potentially execute an attack on...
io.undertow:undertow-servlet (1.0.0.cr5), io.undertow:undertow-websockets-jsr (1.0.0.cr5) +2 more potentially affected by CVE-2024-7885 via io.undertow:undertow-core (1.0.0.cr5)
io.undertow:undertow-core MAVEN version 1.0.0.cr5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr5 - io.undertow:undertow-websockets-jsr 1.0.0.cr5 -...
CVE-2022-26327
OpenText Performance Center (Windows) 12.63 is affected by CVE-2022-26327, described as Exposure of Sensitive Information to an Unauthorized Actor, enabling retrieval of embedded sensitive data. Connected sources (PT Security PT-2024-11542) confirm the vulnerable version (12.63) and recommend upd...
CVE-2022-26327 Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63...
CVE-2022-26327: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This issue affects Performance Center: 12.63...
Newlib security vulnerabilities
Newlib is a C language library from the Sourceware organization primarily for embedded systems. A security vulnerability exists in Newlib version 4.3.0, which stems from an arbitrary code execution vulnerability in the gettimeofday method...
Siemens LOGO! password plaintext storage vulnerability
Siemens LOGO! BM Base Module devices are used for basic small-scale automation tasks.SIPLUS extreme products are designed for reliable operation under extreme conditions and are based on SIMATIC, LOGO! SIPLUS devices use the same firmware as the products on which they are based. A password...
Dell BIOS input validation error vulnerability
Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS suffers from an input validation error vulnerability that stems from the presence of incorrect input validation, which can be exploited by an attacker with elevated privileges and...
CVE-2024-39922
A vulnerability has been identified in LOGO! 12/24RCE 6ED1052-1MD08-0BA1 All versions, LOGO! 12/24RCEo 6ED1052-2MD08-0BA1 All versions, LOGO! 230RCE 6ED1052-1FB08-0BA1 All versions, LOGO! 230RCEo 6ED1052-2FB08-0BA1 All versions, LOGO! 24CE 6ED1052-1CC08-0BA1 All versions, LOGO! 24CEo...
August 13, 2024—KB5041851 (Monthly Rollup)
None None...