The vulnerability in the Bluetooth Classic environment for IoT application development, related to writing beyond the buffer boundaries in memory, allows a intruder to trigger a service failure.

The vulnerability in the Bluetooth Classic environment for IoT application development, espressif esp-idf, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted LMP package...

DEBIAN-CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

CVE-2021-31609

The Bluetooth Classic implementation in Silicon Labs iWRAP 6.3.0 and earlier does not properly handle the reception of an oversized LMP packet greater than 17 bytes, allowing attackers in radio range to trigger a crash in WT32i via a crafted LMP packet...

CVE-2021-28139

The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield...

UBUNTU-CVE-2021-34146

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart crash of the device by flooding it with LMPAURand packets after the pagi...

AB32VG1 安全漏洞

The AB32VG1 is a chip from ZTE Bluetooth. A security vulnerability exists in the AB32VG1, which stems from the Bluetooth Classic implementation on the AB32VG1 device not properly handling the reception of successive unsolicited LMP responses, allowing an attacker within radio range to trigger a...

Texas Instruments CC256XCQFN-EM 安全漏洞

Texas Instruments CC256XCQFN-EM is a Bluetooth development tool from Texas Instruments USA. A security vulnerability exists in the Texas Instruments CC256XCQFN-EM, which stems from the Bluetooth on the chipset's inability to properly process and accept successive non-legitimate LMP responses that...

JBL TUNE500BT输入验证错误漏洞

The JBL TUNE500BT is a Bluetooth headset from harman. The JBL TUNE500BT suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on the JBL TUNE500BT device failing to properly handle the reception of successive unsolicited LMP responses, allowing ...

Actions ATS2815输入验证错误漏洞

The Actions ATS2815 is a Bluetooth chip from Actions. The Actions ATS2815 suffers from an Input Authentication Error vulnerability that stems from the Bluetooth Classic implementation on the Actions ATS2815 and ATS2819 chipsets failing to correctly handle the receipt of LMPhostconnectionreq...

Zhuhai Jieli AC690X输入验证错误漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. The Zhuhai Jieli AC690X suffers from an input validation error vulnerability that arises from the Bluetooth Classic implementation in the Zhuhai Jieli AC6366CDEMOV1.0 that does not correctly handle the reception of consecutively provided unsolicited LM...

Espressif ESP-IDF 代码注入漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Loxin Information Technology Espressif. A code injection vulnerability exists in the Espressif ESP-IDF that stems from the Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier versions not properly...

Zhuhai Jieli AC690X输入验证错误漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. The Zhuhai Jieli AC690X suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on Zhuhai Jieli AC690X and AC692X devices failing to properly handle a garbled LMP setup program followed by a misformatte...

Zhuhai Jieli AC690X 安全漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. A security vulnerability exists in the Zhuhai Jieli AC690X that arises from the Bluetooth Classic implementation on Zhuhai Jieli AC690X devices not properly handling the reception of very large LMP packets greater than 17 bytes during LMP auto-rate,...

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

Sql injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550 Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue...

CVE-2021-24550

CVE-2021-24550 affects the WordPress Broken Link Manager plugin (versions ≤ 0.6.5). The issue arises because the plugin does not sanitize, validate, or escape the url GET parameter before using it in a SQL statement when retrieving the URL to edit, causing an authenticated SQL injection. Root cau...

Wordpress Plugin Broken Link Manager SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A SQL injection vulnerability exists in Wordpress Plugin Brok...

Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection

The plugin does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue PoC GET...