CVE-2023-6749 Unchecked user input length in the Zephyr Settings Shell

Unchecked length coming from user input in settings shell...

zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from a signed to unsigned conversion issue in esp32ipmsend...

zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from the length of unchecked user input in Shell settings...

zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.5 and earlier versions, which stems from the removerxfilter function being out of scope...

PT-2024-15077 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an unchecked length coming from user input in the settings shell. This could potentially lead to exploitation. No specific details about affected devices or...

CVE-2023-31237

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

CVE-2023-31237

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

CVE-2023-31237 WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

CVE-2023-31237

CVE-2023-31237 affects the WordPress plugin Zephyr Project Manager (versions

CVE-2023-31237 WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a through 3.3.9...

WordPress Plugin Zephyr Project Manager Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

PT-2023-23258 · Unknown · Zephyr Project Manager

Name of the Vulnerable Software and Affected Versions: Zephyr Project Manager versions n/a through 3.3.9 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Zephyr Project Manager, allowing...

PT-2023-28454 · Zephyr · Zephyr

Name of the Vulnerable Software and Affected Versions: Zephyr affected versions not specified Description: The issue is related to a possible buffer overflow in the Zephyr mgmt subsystem when asserts are disabled. Recommendations: At the moment, there is no information about a newer version that...

The vulnerability of the subsys/canbus/isotp/isotp.c file in the CAN-bus subsystem of the real-time operating system Zephyr allows a attacker to execute arbitrary code.

The vulnerability of the subsys/canbus/isotp/isotp.c file in the CAN-bus subsystem of the real-time operating system Zephyr relates to the possibility of buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code...

Malicious code in ui-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a561b294f7f6a0f789590b0275ba5e20bf81a33bc4ea74485664883386c144b6 The OpenSSF Package Analysis project identified 'ui-zephyr' @ 19.20.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8628 Malicious code in ui-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a561b294f7f6a0f789590b0275ba5e20bf81a33bc4ea74485664883386c144b6 The OpenSSF Package Analysis project identified 'ui-zephyr' @ 19.20.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-4424

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

Buffer overflow

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...

CVE-2023-4424 bt: hci: DoS and possible RCE

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the victim BLE device...