CVE-2023-7009 CVE-2023-7009

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be...

CVE-2023-7009 CVE-2023-7009

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be...

CVE-2023-7006: Undefined Security Weakness

The unlockKey character in a lock using Sciener firmware can be brute forced through repeated challenge requests, compromising the locks integrity...

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CNVD-2024-28621)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass security features and compromise integrity...

CVE-2023-7009: Undefined Security Weakness

Some Sciener-based locks support plaintext message processing over Bluetooth Low Energy, allowing unencrypted malicious commands to be passed to the lock. These malicious commands, less then 16 bytes in length, will be processed by the lock as if they were encrypted communications. This can be...

CVE-2023-7004: Improper Verification of Source of a Communication Channel

The TTLock App does not employ proper verification procedures to ensure that it is communicating with the expected device, allowing for connection to a device that spoofs the MAC address of a lock, which compromises the legitimate locks integrity...

CVE-2024-22463: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to compromise of confidentiality and integrity of sensitive information...

PT-2024-2132

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.6.0.x Description The issue is related to the use of a broken or risky cryptographic algorithm, which could be exploited by a remote unprivileged attacker. This exploitation could lead to the...

Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : EDK II vulnerabilities (USN-6638-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6638-1 advisory. Marc Beatove discovered buffer overflows exit in EDK2. An attacker on the local network could potentially use this to impact...

Origin Validation Error

Google Chrome is vulnerable to Origin Validation Error. The vulnerability is caused due to the Incorrect security UI that can allow a remote attacker to potentially spoof security UI via a crafted HTML page. This can lead to compromising Integrity of the system...

PT-2024-1614 · Emerson · Emerson Rosemount Gc700Xa +2

Name of the Vulnerable Software and Affected Versions: Emerson Rosemount GC370XA, GC700XA, and GC1500XA products affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of Emerson Rosemount GC1500XA, GC700XA, and GC370XA products. An...

PT-2024-1121

Name of the Vulnerable Software and Affected Versions X.Org Server affected versions not specified Description A flaw was found in the X.Org server, specifically in the DeviceFocusEvent and XIQueryPointer functions, which can lead to a heap overflow. This issue is caused by the server allocating...

CVE-2022-36763: Heap-based Buffer Overflow

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

CVE-2023-50351: Use of a Broken or Risky Cryptographic Algorithm

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compromise the confidentiality or integrity of data...

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of the Django web application software lies in the fact that code is loaded without any checks for its integrity. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Django web application framework lies in the fact that code is loaded without any checks for its integrity. Exploiting this vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

CVE-2023-6051

Removed by vendor...

CVE-2023-46144

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices...

Design/Logic Flaw

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices...

CVE-2023-46144: Download of Code Without Integrity Check

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices...