Information disclosure

A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...

CVE-2023-5028 China Unicom TEWA-800G debug log file

A vulnerability, which was classified as problematic, has been found in China Unicom TEWA-800G 4.16L.04CT2015Yueme. Affected by this issue is some unknown functionality. The manipulation leads to information exposure through debug log file. It is possible to launch the attack on the physical...

PT-2023-31524 · China Unicom · Tewa-800G

Name of the Vulnerable Software and Affected Versions: China Unicom TEWA-800G version 4.16L.04 CT2015 Yueme Description: A problematic issue has been found, affecting some unknown functionality, which leads to information exposure through a debug log file. The attack can be launched on the physic...

CVE-2023-3786

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...

Improper access control

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...

CVE-2023-3786 Aures Komet Kiosk Mode access control

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...

PT-2023-26147 · Aures · Aures Komet

Name of the Vulnerable Software and Affected Versions: Aures Komet up to 20230509 Description: A problematic issue has been found in Aures Komet, affecting the Kiosk Mode component. This leads to improper access controls. The attack can be launched on the physical device. Recommendations: For Aur...

kernel: net/mlx5: E-Switch, pair only capable devices

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...

CVE-2023-0808

A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW315U54061.47/MW315U54061.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It i...

Hardcoded credentials

A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW315U54061.47/MW315U54061.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It i...

Sony PlayStation Buffer Overflow Vulnerability

The Sony PlayStation is a series of home game consoles from the Japanese company Sony Sony. A buffer overflow vulnerability exists in Sony PS4 and PS5, which stems from a lack of length validation of the parameter dataLength parameter and can be exploited by an attacker to launch an attack agains...

CVE-2022-3349

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFATreadupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical...

Heap overflow

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFATreadupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical...

CVE-2022-3349

Summary: CVE-2022-3349 affects Sony PS4/PS5 in the exFAT Handler, specifically the UVFAT_readupcasetable function. The vulnerability stems from manipulating the dataLength argument, leading to a heap-based buffer overflow that can be triggered on a physical device. Impact & scope (as reported): H...

CVE-2022-3349 Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow

A vulnerability was found in Sony PS4 and PS5. It has been classified as critical. This affects the function UVFATreadupcasetable of the component exFAT Handler. The manipulation of the argument dataLength leads to heap-based buffer overflow. It is possible to launch the attack on the physical...

Sony PlayStation 缓冲区错误漏洞

The Sony PlayStation is a series of home game consoles from the Japanese company Sony Sony. A buffer overflow vulnerability exists in Sony PS4 and PS5, which stems from a lack of length validation of the parameter dataLength parameter and can be exploited by an attacker to launch an attack agains...

Authentication flaw

Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation...

CVE-2022-26357

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the...

CVE-2022-26357

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the...

Denial Of Service (DoS)

Xen is vulnerable to denial of service. Upon de-assigment of a physical device from a guest, the identity mappings would be left in place, allowing a guest continued access to ranges of memory which it shouldn't have access to anymore...