CVE-2023-6533: Uncaught Exception

Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by the end device will not be acknowledged by the controller. This vulnerability exists in PC Controller v5.54.0, and...

CVE-2023-52434 smb: client: fix potential OOBs in smb2_parse_contexts()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following oops when accessing invalid create contexts from server: BUG: unabl...

pc-boost.com Cross Site Scripting vulnerability OBB-3854951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-48220

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48219

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

Design/Logic Flaw

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

Design/Logic Flaw

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48220

Certain HP Desktop PC products using the HP TamperLock feature are vulnerable to an intrusion detection bypass. The root cause is insufficient validation of input data within the microprogramming-based EFI (BIOS) software. This flaw allows a perpetrator to conduct a physical attack to circumvent ...

CVE-2022-48220

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48219

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48219

Certain HP Desktop PC products are vulnerable to an intrusion detection bypass due to a flaw in the HP TamperLock feature. The root cause is identified as insufficient validation of input data within the microprogramming-based EFI (BIOS) firmware . A physical attack could exploit this vulnerabili...

CVE-2022-48219

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48219: Protection Mechanism Failure

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

CVE-2022-48220: Observable Discrepancy

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusion detection bypass via a physical attack. HP is releasing firmware and guidance to mitigate these potential vulnerabilities...

February 13, 2024—KB5034809 (Security-only update)

None None...

February 13, 2024—KB5034831 (Monthly Rollup)

None None...

PT-2024-2749

Name of the Vulnerable Software and Affected Versions HP Desktop PC products affected versions not specified Description The issue is related to the HP TamperLock feature, which may allow intrusion detection bypass via a physical attack. This is due to insufficient input validation in the HP...

Input validation

Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 for Windows allows a local attacker to read privileged data...

CVE-2024-23769

CVE-2024-23769 affects Samsung Magician PC Software for Windows (version 8.0.0). The issue is improper privilege control for a named pipe, enabling a local attacker to read privileged data. Relevant details: impact is confidentiality (high) with local access and low attack complexity, user intera...

CVE-2024-23769: Undefined Security Weakness

Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 for Windows allows a local attacker to read privileged data...