ROZCOM client 安全漏洞

ROZCOM client is a walkie-talkie system from ROZCOM. A security vulnerability exists in the ROZCOM server framework. An attacker could exploit this vulnerability to disclose information via an unspecified request...

CVE-2023-31185

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request...

PT-2023-12602 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Video framework affected versions not specified Description: The video framework has a memory overwriting issue caused by an addition overflow. This can affect availability upon successful exploitation. Recommendations: At the moment, there i...

PT-2023-12607 · Unknown · Hw Keymaster

Name of the Vulnerable Software and Affected Versions: HW KEYMASTER module affected versions not specified Description: The issue is related to a lack of length check in the HW KEYMASTER module, which may lead to out-of-bounds read when successfully exploited. Recommendations: At the moment, ther...

PT-2023-2931 · Vmware · Vmware Nsx-T

Name of the Vulnerable Software and Affected Versions: VMware NSX-T affected versions not specified Description: The issue is related to a reflected cross-site scripting vulnerability in VMware NSX-T due to a lack of input validation. This allows a remote attacker to inject HTML or JavaScript,...

SUSE CVE-2023-31655

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

PT-2023-17176 · Unknown · Settings Module

Name of the Vulnerable Software and Affected Versions: Settings module affected versions not specified Description: The issue concerns a file privilege escalation vulnerability in the Settings module. Successful exploitation of this vulnerability may affect confidentiality. Recommendations: At th...

PT-2023-35839 · Libredwg · Libredwg

Name of the Vulnerable Software and Affected Versions: LibreDWG affected versions not specified Description: The issue is related to a crash caused by an unknown read. Technical details about the crash include the function names dxf fixup string, dwg dxf DIMENSION ALIGNED private, and dwg dxf...

PT-2023-35834 · Apache · Apache Lucene

Name of the Vulnerable Software and Affected Versions: Apache Lucene affected versions not specified Description: A security exception crash has been reported in Apache Lucene. The crash occurs in the org.apache.lucene.util.ArrayUtil.growExact function, which is called by...

Design/Logic Flaw

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

UBUNTU-CVE-2023-31655

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

CVE-2023-31655

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

PT-2023-23434

Name of the Vulnerable Software and Affected Versions nasm version 2.16.02rc1 Description A heap buffer overflow issue exists. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited...

PT-2023-22738 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities...

PT-2023-22452 · Flir Systems · Flir-Dvtel

Name of the Vulnerable Software and Affected Versions: FLIR-DVTEL affected versions not specified Description: An issue in FLIR-DVTEL allows a remote attacker to execute arbitrary code via a crafted request to the "management page" of the device. Recommendations: At the moment, there is no...

PT-2023-22453 · Unknown · Agasio-Camera

Name of the Vulnerable Software and Affected Versions: Agasio-Camera affected versions not specified Description: An issue in the Agasio-Camera device allows a remote attacker to execute arbitrary code via the check and authLevel parameters. Recommendations: At the moment, there is no information...

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and sandbox...

Important: Red Hat Security Advisory: mysql security update

An update for mysql is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

PT-2023-2701 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The vulnerability is related to insufficient protection of service data in the Windows Bluetooth Driver, which can allow a remote attacker to gain unauthorized access to...

PT-2023-2715 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can enable an attacker to impact the system. The...