8488 matches found
CVE-2023-38299
Various software builds for the AT&T Calypso, Nokia C100, Nokia C200, and BLU View 3 devices leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining...
CVE-2023-38301
An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers. Various software builds for the BLU View 2, Boost Mobile Celero 5G, Sharp Rouvo V, Motorola Moto G Pure, Motorola Moto G Power, T-Mobile Revvl 6 Pro 5G, and...
CVE-2023-38299
Specific software builds for the AT&T Calypso , Nokia C100 , Nokia C200 , and BLU View 3 devices are vulnerable to an information leak. A high-privilege process incorrectly exposes the device IMEI to a system property named persist.sys.imei1, which can be accessed by any local application without...
CVE-2023-38300
A specific software build for the Orbic Maui device (Orbic/RC545L/RC545L:10/ORB545L_V1.4.2_BVZPP/230106:user/release-keys ) leaks sensitive device identifiers. A high-privilege process exposes the IMEI and ICCID to system properties, allowing any local app to access them without permissions or sp...
CVE-2023-38291
A third-party component vulnerability in the ro.boot.wifimacaddr property allows various software builds of TCL (30Z, 10L) and Motorola (Moto G Pure, Moto G Power) devices to leak the Wi-Fi MAC address . Because this property is accessible by any local app without permissions or special privilege...
Verizon Orbic Maui security vulnerability
Verizon Orbic Maui is a cell phone from Verizon. A security vulnerability exists in the Verizon Orbic Maui that stems from disclosing the IMEI and ICCID to system attributes, resulting in the existence of a security vulnerability...
CVE-2023-38302
A specific software build for the Sharp Rouvo V device (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:user/release-keys ) leaks the Wi-Fi and Bluetooth MAC addresses to system properties. This occurs because a high-privilege process exposes these identifiers, bypassing Google's re...
CVE-2023-38296
Various software builds for TCL 30Z and TCL A3X devices are vulnerable to a security flaw where the ICCID is leaked to a system property. Specifically, a high-privilege process exposes this identifier, allowing any local app to indirectly obtain it without any permissions or special privileges by...
DEBIAN-CVE-2024-26822
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...
UBUNTU-CVE-2024-26822
In the Linux kernel, the following vulnerability has been resolved: smb: client: set correct id, uid and cruid for multiuser automounts When uid, gid and cruid are not specified, we need to dynamically set them into the filesystem context used for automounting otherwise they'll end up reusing the...
Possible DoS translating ASN.1 object identifiers (CVE-2023-2650)
Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow. Impact summary: Applications that use OBJobj2txt directly, or use any of the OpenSSL subsystems OCSP, PKCS7/SMIME, CMS, CMP/CRMF or TS with no message size limit may experience...
ALPINE-CVE-2022-24806
net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...
SUSE-SU-2024:1320-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-46925: Fixed kernel panic caused by race of smcsock bsc1220466. - CVE-2021-46926: Fixed bug when detecting controllers in ALSA/hda/intel-sdw-acpi...
CVE-2024-28957
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...
CVE-2024-28957
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...
CVE-2024-28957
The Cente middleware TCP/IP Network Series , developed by DMG MORI Digital Co., LTD. and provided by NEXT Co., Ltd., is affected by a generation of predictable identifiers issue (CWE-340). A remote unauthenticated attacker can exploit this vulnerability to interfere with communications by predict...
CVE-2024-28957
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...
CVE-2024-28957: Generation of Predictable Numbers or Identifiers
Generation of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If this vulnerability is exploited, a remote unauthenticated attacker may interfere communications by predicting some packet header IDs of the device...
PT-2024-22643 · Unknown · Cente Middleware Tcp/Ip Network Series
Name of the Vulnerable Software and Affected Versions: Cente middleware TCP/IP Network Series affected versions not specified Description: A generation of predictable identifiers issue exists in the Cente middleware TCP/IP Network Series. If this issue is exploited, a remote unauthenticated...
Cente Middleware TCP/IP Network Series Security Vulnerabilities
Cente middleware TCP/IP Network Series is a series of network devices from Cente Japan. A security vulnerability exists in the Cente middleware TCP/IP Network Series. A remote attacker could exploit the vulnerability to disrupt communications by predicting certain packet header IDs of the device...