7770 matches found
PT-2024-20211 · Sony · Sony Xav-Ax5500
Name of the Vulnerable Software and Affected Versions: Sony XAV-AX5500 affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this issue...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the tpmtisspi module not considering SPI headers when allocating TPMSPIxfer buffers...
CVE-2023-25646
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
CVE-2023-25646
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
CVE-2023-25646 Permission and Access Control Vulnerability in ZTE H388X
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
CVE-2023-25646: Improper Preservation of Permissions
There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can use this vulnerability to obtain elevated permissions on the affected device by performing specific operations...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which originates from a reference count leak in the spi:uniphier module uniphierspiprobe...
DEBIAN-CVE-2024-38567
In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: add a proper sanity check for endpoints Syzkaller reports 1 hitting a warning which is caused by presence of a wrong endpoint type at the URB sumbitting stage. While there was a check for a specific 4th endpoint,...
PT-2024-4337
Name of the Vulnerable Software and Affected Versions ZTE ZXHN H388X affected versions not specified Description The issue is related to an unauthorized access vulnerability. It allows attackers with common user permissions to obtain elevated permissions on the affected device by performing...
AMD Ryzen Security Breach
AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen that stems from a potential issue in the SPI protection feature that could allow an attacker with kernel-mode access to bypass the native system management mode ROM protecti...
Linux kernel USB driver Interface Authorized Store
The vulnerability of the interfaceauthorizedstore function in the drivers/usb/core/sysfs.c file of the Linux USB driver kernel is related to an infinite wait loop for resources. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of...
Linux kernel USB driver Disable Show Store Buffer Overflow DoS
The vulnerability of the disableshow,store functions in the drivers/usb/core/port.c file of the Linux kernel’s USB driver is related to an infinite waiting loop for resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
PT-2024-27978 · Gnome +2 · Gnome Settings Daemon +2
Name of the Vulnerable Software and Affected Versions: GNOME Settings Daemon versions through 46.0 Description: Mismatches in interpreting USB authorization policy between GNOME Settings Daemon and the Linux kernel's underlying device matching logic allow a physically proximate attacker to access...
PT-2024-25221 · Lb Link · Lb-Link Bl-W1210M
Name of the Vulnerable Software and Affected Versions: LB-LINK BL-W1210M version 2.0 Description: The issue is related to incorrect access control in the UART/Serial interface, allowing attackers to access the root terminal without authentication. This enables unauthorized access to the system...
CVE-2024-33374
Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...
CVE-2024-33374: Improper Privilege Management
Incorrect access control in the UART/Serial interface on the LB-LINK BL-W1210M v2.0 router allows attackers to access the root terminal without authentication...
CVE-2024-33374
The LB-LINK BL-W1210M v2.0 router contains an incorrect access control vulnerability in its UART/Serial interface . This flaw allows an attacker to bypass authentication and gain direct access to the root terminal , leading to unauthorized system access. As a temporary workaround, it is recommend...
Linux SPI Heap Buffer Overflow DoS
The vulnerability of the spisync function in the drivers/spi/spi.c file of the Linux System on Chip Serial Peripheral Interface SPI driver is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
QEMU Cycle Unreachable Exit DoS
The vulnerability of the QEMU hardware emulator is related to an infinite loop error in the emulation of the USB xHCI controller during the calculation of the TRB ring length. Exploiting this vulnerability can allow a hacker to cause a system failure...
