1944 matches found
Stack overflow
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution...
Command injection
Several potential command injections vulnerabilities exist in the AT command interface of ALEOS before 4.11.0, and 4.9.4...
CVE-2019-11853
ALEOS AT command interface exposes several potential command injection vulnerabilities in versions prior to 4.11.0 and 4.9.4. Connected CNVD/NVD entries confirm the issue affects ALEOS and reference affected versions; no additional exploitation details are provided in the sources. Remediation gui...
CVE-2019-11848
CVE-2019-11848 is an API abuse vulnerability in the ALEOS AT Command API. The issue arises from lack of length checking when handling certain user-supplied values, affecting ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9. The connected sources corroborate the affected component (AT Command API)...
CVE-2019-11850 ALEOS AT Command Stack Overflow
A stack overflow vulnerabiltity exist in the AT command interface of ALEOS before 4.11.0. The vulnerability may allow code execution...
CVE-2019-11850
CVE-2019-11850 is about a stack overflow in the AT command interface of ALEOS before version 4.11.0. The vulnerability exists in ALEOS, an embedded M2M development environment, and can lead to remote code execution, with exploitation demonstrated in versions prior to 4.11.0 per CNVD-2020-48629 an...
CVE-2019-11849
ALEOS (embedded M2M) prior to version 4.11.0 contains a stack overflow vulnerability in the AT Command API that can enable code execution. The CNVD-2020-48628 entry confirms the issue in ALEOS and specifies the affected component (AT Command API) and the vulnerable range (before 4.11.0). Practica...
Researchers Warn of Flaw Affecting Millions of IoT Devices
Researchers are urging connected-device manufacturers to ensure they have applied patches addressing a flaw in a module used by millions of Internet-of-Things IoT devices. If exploited, researchers speculated that the flaw could allow attackers to knock out a city’s electricity or even overdose a...
zinshaus24.at Cross Site Scripting vulnerability OBB-1256100
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
weinshop24.at Cross Site Scripting vulnerability OBB-1255710
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze
Summary AT&T has released versions 1801-ze for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...
CVE-2019-18254
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with...
safe7.at Cross Site Scripting vulnerability OBB-1208509
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35446)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause a denial of service application crash with the help of the @ character before the JavaScript fiel...
python: email.utils.parseaddr wrongly parses email addresses
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...
PT-2021-6018
Name of the Vulnerable Software and Affected Versions urllib3 versions prior to 1.26.5 Description The issue is related to an HTTP client vulnerability in Python urllib3, which is associated with uncontrolled resource consumption. Exploitation of the vulnerability may allow a remote attacker to...
CVE-2020-13842
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 June 2020...
CVE-2020-13841
An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...
CVE-2020-13841
An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...
CVE-2020-13839
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 June 2020...