CVE-2023-2003: Embedded Malicious Code

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device...

TrustZone Networking Unauthorized Access

The vulnerability of the TrustZone subsystem for networking functions in Qualcomm embedded systems’ operating systems lies in the insufficient protection of sensitive data during the analysis of peripheral channels. Exploiting this vulnerability can allow attackers to gain unauthorized access to...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects APM Agents for Monitoring

Summary Multiple vulnerabilities in the Oracle Java SE and the Java SE Embedded impact the IBM SDK, Java Technology Edition. This effects all IBM Cloud Application Performance Management agents, all versions. Vulnerability Details CVEID:CVE-2021-28167 DESCRIPTION: Eclipse Openj9 could allow a...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (2.11.0) +3 more potentially affected by CVE-2023-31007 via org.apache.pulsar:pulsar-broker (2.11.0)

org.apache.pulsar:pulsar-broker MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker and may be impacted: - io.github.embedded-middleware:embedded-pulsar-core =0.0.4, =0.0.5 -...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (2.11.0) +3 more potentially affected by CVE-2023-30428 via org.apache.pulsar:pulsar-broker (2.11.0)

org.apache.pulsar:pulsar-broker MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker and may be impacted: - io.github.embedded-middleware:embedded-pulsar-core =0.0.4, =0.0.5 -...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (2.11.0) +4 more potentially affected by CVE-2023-37579 via org.apache.pulsar:pulsar-functions-worker (2.11.0)

org.apache.pulsar:pulsar-functions-worker MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-functions-worker and may be impacted: - io.github.embedded-middleware:embedded-pulsar-core =0.0.4, =0.0.5 -...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (2.11.0) +3 more potentially affected by CVE-2023-31007 via org.apache.pulsar:pulsar-broker (2.11.0)

org.apache.pulsar:pulsar-broker MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker and may be impacted: - io.github.embedded-middleware:embedded-pulsar-core =0.0.4, =0.0.5 -...

July 11, 2023—KB5028223 (Security-only update)

None None...

July 11, 2023—KB5028233 (Security-only update)

None None...

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8.1 and Windows Server 2012 R2 (KB5028941)

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8.1 and Windows Server 2012 R2 KB5028941 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microso...

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 (KB5028940)

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 8 Standard and Windows Server 2012 KB5028940 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1...

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5028939)

July 11, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5028939 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framewor...

org.eclipse.jetty:jetty-annotations (7.0.0.m1), org.eclipse.jetty:jetty-deploy (7.0.0.m1) +10 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.0.0.m1)

org.eclipse.jetty:jetty-xml MAVEN version 7.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty:jetty-annotations 7.0.0.m1 - org.eclipse.jetty:jetty-deploy 7.0.0.m1 -...

org.eclipse.jetty:jetty-annotations (7.0.0.m0), org.eclipse.jetty:jetty-deploy (7.0.0.m0) +8 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (7.0.0.m0)

org.eclipse.jetty:jetty-xml MAVEN version 7.0.0.m0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - org.eclipse.jetty:jetty-annotations 7.0.0.m0 - org.eclipse.jetty:jetty-deploy 7.0.0.m0 -...

Milesight MilesightVPN requestHandlers.js detail_device cross-site scripting (XSS) vulnerabilities

Talos Vulnerability Report TALOS-2023-1704 Milesight MilesightVPN requestHandlers.js detaildevice cross-site scripting XSS vulnerabilities July 6, 2023 CVE Number CVE-2023-24497,CVE-2023-24496 SUMMARY Cross-site scripting xss vulnerabilities exist in the requestHandlers.js detaildevice...

Netgear R6250 Buffer Overflow

The vulnerability in the embedded software of Netgear R6250 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger buffer overflows remotely...

PT-2023-8443 · Qualcomm · Wlan Firmware +1

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to memory corruption in WLAN Firmware, specifically during a memory copy of the pmk cache. This can be exploited by a remote attacker to execute...

de.adorsys.keycloak:keycloak-clientregistration-provider (>=1.2, <=3.0), de.adorsys.keycloak:keycloak-provider-extension (>=1.2, <=3.0) +8 more potentially affected by CVE-2022-4361 via org.keycloak:keycloak-services (3.4.3.final)

org.keycloak:keycloak-services MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.keycloak:keycloak-clientregistration-provider =1.2, =1.2, =0.0.1, =0.0.1, =0.0.1,...

CVE-2023-35176

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device...

CVE-2023-35176

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device...