1943 matches found
The vulnerability of the HID Profile interface of the Bluetooth protocol stack for the Linux BlueZ operating system allows a perpetrator to elevate their privileges and execute arbitrary commands.
The vulnerability of the HID Profile interface of the Bluetooth protocol stack for the Linux BlueZ operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands remotely...
New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices
A critical Bluetooth security flaw could be exploited by threat actors to take control of Android, Linux, macOS and iOS devices. Tracked as CVE-2023-45866, the issue relates to a case of authentication bypass that enables attackers to connect to susceptible devices and inject keystrokes to achiev...
PT-2023-7497 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The vulnerability is related to insufficient input validation in Microsoft Edge, allowing a remote attacker to bypass security restrictions and elevate their privilege...
USN-6463-2 open-vm-tools vulnerabilities
USN-6463-1 fixed vulnerabilities in Open VM Tools. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker with Guest Operations privileges could...
The vulnerability of HP LaserJet Pro printer’s microprogramming software lies in the copying of buffers without checking the size of the input data, allowing attackers to exploit this to gain higher privileges.
The vulnerability of HP LaserJet Pro printer microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2023-40082
In modifyfornextstage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40082
In modifyfornextstage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40090
In BTMBleVerifySignature of btmble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40077
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Race condition
In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40090
What’s affected: Google Android platform vulnerability CVE-2023-40090 in the Bluetooth stack, specifically BTM_BleVerifySignature in btm_ble.cc. The issue is described as bypassing signature validation via side-channel information disclosure, enabling remote escalation of privilege with no additi...
CVE-2023-40082
In modifyfornextstage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2023-27263 · Bluetooth · Bluetooth
Name of the Vulnerable Software and Affected Versions: Bluetooth software affected versions not specified Description: The issue is related to a possible way to bypass signature validation due to side channel information disclosure in the BTM BleVerifySignature function of btm ble.cc. This could...
VulnCheck KEV: CVE-2021-27855
FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this...
PT-2023-7532 · Unknown · Metadatabase.Cpp
Name of the Vulnerable Software and Affected Versions: MetaDataBase.cpp affected versions not specified Description: The issue is related to a possible UAF Use After Free write due to a race condition in multiple functions of MetaDataBase.cpp. This could lead to remote escalation of privilege wit...
Microsoft Edge browser’s vulnerability, related to the lack of protection for website structure, allows attackers to enhance their privileges.
The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software relates to unauthorized access to shared data in a multi-threaded context, allowing attackers to gain increased privileges.
The vulnerability of Siemens SCALANCE industrial switches’ microprogramming software is related to unsynchronized access to shared data in a multi-threaded context. Exploiting this vulnerability could allow an attacker operating remotely to enhance their privileges...
The vulnerability of the Oslo.privsep component in the cloud computing platform Openstack, related to insecure management of privileges, allows a perpetrator to escalate their privileges.
The vulnerability of the Oslo.privsep component in the OpenStack cloud service platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the status_logs_filter_dynamic.php component of the software network interface card based on the FreeBSD Netgate pfSense operating system allows a intruder to enhance their privileges.
The vulnerability of the statuslogsfilterdynamic.php component of the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a...