7536 matches found
Duplicate Advisory: EVE's Debug Functions Unlockable Without Triggering Measured Boot
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4c4v-42hc-72p6. This link is maintained to preserve external references. Original Description On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the...
CVE-2022-47848
An issue was discovered in Bezeq Vtech NB403-IL version BZ2.02.07.09.13.01 and Vtech IAD604-IL versions BZ2.02.07.09.13.01, BZ2.02.07.09.13T, and BZ2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service...
CVE-2023-4803
creationtimestamp| type| source ---|---|--- 2023-09-13 20:23:59+00:00| seen| https://t.me/cibsecurity/70409...
USN-6348-1 linux-intel-iotg-5.15, linux-raspi vulnerabilities
Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...
CVE-2023-30718
creationtimestamp| type| source ---|---|--- 2023-09-06 07:31:00+00:00| seen| https://t.me/cibsecurity/69947...
CVE-2015-1390
creationtimestamp| type| source ---|---|--- 2023-09-05 22:17:03+00:00| seen| https://t.me/cibsecurity/69893...
CVE-2022-3407
I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing...
End of Sale/Renewal for Citrix DaaS Hybrid Rights add-on, new purchases, expansions, and renewals
Cloud Software Group has decided to end of sale EOS on October 11th, 2023, and end of renewal EOR on December 6th, 2023 all Citrix entitlements with hybrid rights HR. This change is designed to simplify our product line and deliver superior value and user experience to our customers. Scope of...
USN-6317-1 linux, linux-aws, linux-aws-5.4, linux-gcp, linux-hwe-5.4, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerabilities
Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions. A local unprivileged user could use this to obtain to sensitive information. CVE-2022-40982 Tavis Ormandy discovered that some AMD processors...
CVE-2023-39801
A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...
The vulnerability of NETGEAR RAX30 network interface cards’ UPnP microprogramming service allows a hacker to execute arbitrary code.
The vulnerability of NETGEAR RAX30 microprogrammed software routing devices stems from the lack of measures taken to sanitize data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-3078
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
Path traversal
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
CVE-2023-3078
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client UDC that could allow an attacker with local access to execute code with elevated privileges...
Lenovo Universal Device Client 代码问题漏洞
Lenovo Universal Device Client is a universal device client from the Chinese company Lenovo. A code issue vulnerability exists in Lenovo Universal Device Client that originates from allowing an attacker with local access privileges to elevate privileges and execute code...
Harman Infotainment Security Breach
Harman Infotainment is an in-vehicle infotainment system from Harman. A security vulnerability exists in Harman Infotainment version 20190525031613, which originated from a vulnerability that allows an attacker to gain access to internal resources with root privileges via the USB Ethernet transfe...
CVE-2023-39391
Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality...
Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory
Impact Angular Universal applications on 16.1.0 and 16.1.1 using critical CSS inlining are vulnerable to a cross-site scripting XSS attack where an attacker can trick another user into visiting a page which injects malicious JavaScript. Angular CLI applications without Universal do perform critic...
GHSA-R3HF-Q8Q7-FV2P Angular critical CSS inlining Cross-site Scripting Vulnerability Advisory
Impact Angular Universal applications on 16.1.0 and 16.1.1 using critical CSS inlining are vulnerable to a cross-site scripting XSS attack where an attacker can trick another user into visiting a page which injects malicious JavaScript. Angular CLI applications without Universal do perform critic...