The vulnerability of the if_usb_probe handler in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the ifusbprobe handler in the drivers/net/wireless/libertas/usb8xxx.ko module of the Linux kernel is related to a memory leak in the implementation. Exploiting this vulnerability can allow an attacker to cause a system failure by connecting a Marvell 8388 USB WLAN device. Thi...

CVE-2019-7229

The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither of these transmission methods implements any form of...

CVE-2019-12592

CVE-2019-12592 affects the Evernote Web Clipper Chrome extension (pre-7.11.1). The vulnerability arises from a mis-handled URL construction in the extension’s iframe/injection framework, allowing a remote site to inject scripts via postMessage and inject a payload into all frames, effectively cau...

Universal Password Vulnerability in Water and Rainfall Data Distribution System of Hangzhou Yuanshi Technology Co.

Water and rain data release system is developed and technically supported by Hangzhou Yuanshi Technology Co., Ltd, which is a platform for water conservancy departments to publicize water and rain information. There is a universal password login vulnerability in the water and rain data...

CVE-2017-9382

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides UPnP services that are available on port 3480 and can also be accessed via port 80 using the url "/port3480". It seems that the UPnP services provide "file" as one of the service actions for a normal...

PT-2019-3113 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a double-free error caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. This error can lead to a denial of service. Recommendations: For Linux...

PT-2019-3349 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.1.8 Description: The issue is related to a NULL pointer dereference in the sound/usb/line6/driver.c driver, which can be caused by a malicious USB device. This can lead to a denial of service. Recommendations:...

May 23, 2019—KB4499182 (Preview of Monthly Rollup)

None None...

May 23, 2019—KB4499184 (Preview of Monthly Rollup)

None None...

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...

kernel: Unallocated memory access by malicious USB device via bNumInterfaces overflow

The usbdestroyconfiguration function, in 'drivers/usb/core/config.c' in the USB core subsystem, in the Linux kernel through 4.14.5 does not consider the maximum number of configurations and interfaces before attempting to release resources. This allows local users to cause a denial of service, du...

CVE-2019-8551

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to universal cross site scripting...

PT-2019-3109 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.0.14 Description: The issue is related to a NULL pointer dereference in the drivers/usb/misc/yurex.c driver, caused by a malicious USB device. This can lead to a denial of service. Recommendations: For Linux...

Rockwell Automation 1719-IRT4 Ex I/O 4 Channel Universal Temperature Input General Purpose Analog I/O

Binary data 754857.prm...

Entek XM-361 Universal Temp. Module Specialty I/O

Binary data 754839.prm...

Rockwell Automation 1790 16 Universal Input 1790-16BV0X Adapter I/O Accessed Via Proxy

Binary data 754532.prm...

Rockwell Automation 1790D-T32BV0 32 Universal Input General Purpose Discrete I/O

Binary data 752659.prm...

Rockwell Automation 1790 8 Universal In/8 Out 1790-8BV8BX/8BV8VX Adapter I/O Accessed Via Proxy

Binary data 754535.prm...

Emerson 396362-02-8 Universal Digital Input module Detection

Binary data 756554.prm...

Universal Password Login Vulnerability in Enterprise Knowledge Service Platform

Enterprise knowledge service platform is a platform system based on literature but higher than literature, from resource type guarantee to enterprise personalized knowledge service. There is a universal password login vulnerability in the enterprise knowledge service platform, which can be...