PT-2020-11408

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the authorize enrol function of fpc ta hw auth.c due to a missing bounds check. This could lead to local information disclosure, requiring System execution...

PT-2020-11407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the fpc ta hw auth unwrap key function of fpc ta hw auth qsee.c. This could lead to local information disclosure, requiring System execution privileges for...

PT-2020-11382

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the fpc ta pn get unencrypted image function of fpc ta pn.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...

PT-2020-11409

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds read in the set nonce function of fpc ta qc auth.c. This could lead to local information disclosure, requiring System executio...

PT-2020-11380

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the fpc ta get build info function of fpc ta kpi.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution...

PT-2020-11381

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the get auth result function of fpc ta hw auth.c due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution...

CVE-2019-12183

Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...

Improper access control

Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...

CVE-2019-12183

CVE-2019-12183 affects Safescan Timemoto TM-616 and TA-8000 series. Description: Incorrect Access Control in the administrative API can let remote attackers read arbitrary files. Root cause: improper access controls in the admin API; impacts are partial confidentiality loss (read access) with net...

PT-2020-9299

Name of the Vulnerable Software and Affected Versions Safescan Timemoto TM-616 and TA-8000 series affected versions not specified Description The issue concerns incorrect access control, allowing remote attackers to read any file via the administrative API. This could potentially lead to...

CVE-2019-12183: Improper Privilege Management

Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...

SafeScan

Remote code execution on biometric IoT devices Biometric dev...

Design/Logic Flaw

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

CVE-2020-7235: Improper Neutralization of Input During Web Page Generation

UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...

PT-2020-19485

Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cB3?ta= parameter, which is related to the profile title. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, consider restricting access to...

SQL injection vulnerability in the Ta***.cl***.php file in the backend of Dream CMS

Dream CMS short for "lmxcms" is an open source website management system cms with no license restrictions. A SQL injection vulnerability exists in the Ta.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...

FANUC 21i-TA Control System

Binary data 764784.prm...

FANUC 16i-TA Control System

Binary data 764775.prm...

CVE-2019-2235

Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...

Buffer overflow

Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...