PT-2023-21225 · Maddy · Maddy

Name of the Vulnerable Software and Affected Versions: maddy versions 0.2.0 through 0.6.2 Description: The issue allows for a full authentication bypass if a SASL authorization username is specified when using the PLAIN authentication mechanisms. Instead of validating the specified username, it i...

CVE-2022-25709

Memory corruption in modem due to use of out of range pointer offset while processing qmi msg...

CVE-2022-25694

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

Memory corruption

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

Jenkins 跨站脚本漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. A security vulnerability exists in Jenkins versions 2.270 through 2.393. An attacker exploited the vulnerability to execu...

Debian: Security Advisory (DLA-383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-45-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-25709

CVE-2022-25709 describes a memory corruption in the data modem caused by using an out-of-range pointer offset while processing a QMI message. The vulnerability is tracked across multiple sources (NVD, Red Hat, CVE listings) and is categorized as High severity with local attack vector and local pr...

CVE-2022-25694 Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

CVE-2022-25694

CVE-2022-25694: A memory corruption issue in a Qualcomm MODEM component caused by an out-of-range pointer offset in UIM. Affected item is a Qualcomm closed-source component; CVSSv3.1 metrics indicate LOCAL access, LOW privileges required, no user interaction, and HIGH impact on confidentiality, i...

CVE-2022-25694 Use of Out-of-range Pointer Offset in MODEM

Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM...

PT-2023-12793 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to memory corruption in the Modem due to the usage of an out-of-range pointer offset in UIM. Recommendations: At the moment, there is no information about a newer version...

PT-2023-12796 · Qualcomm · Snapdragon +64

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a modem due to the use of an out-of-range pointer offset while processing a qmi message. No information is...

PT-2023-14927 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Midgard r0p0 through r32p0 Arm Mali GPU Kernel Driver versions Bifrost r0p0 through r41p0 Arm Mali GPU Kernel Driver versions Valhall r19p0 through r41p0 Arm Mali GPU Kernel Driver version Avalon r41p0...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM : Rack vulnerabilities (USN-5910-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5910-1 advisory. It was discovered that Rack did not properly structure regular expressions in some of its parsing components, which...

CVE-2020-5026

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM...

CVE-2021-3855

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

Schneider Electric Modicon PLCs Predictable Value Range From Previous Values (CVE-2017-6030)

A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, firmware versions prior to Version 1.5.0.0, Modicon M241, firmware versions prior to Version 4.0.5.11, and Modicon M251, firmware versions prior to Version 4.0.5.11. The affected...

Schneider Electric Modicon PLCs Insufficiently Protected Credentials (CVE-2017-6028)

An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs Modicon M241, all firmware versions, and Modicon M251, all firmware versions. Log-in credentials are sent over the network with Base64 encoding leaving them susceptible to sniffing. Sniffed credentials...

CVE-2021-3855 Command Injection in Liman Central Management System

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...