2262 matches found
PT-2020-9212
Name of the Vulnerable Software and Affected Versions ALEOS versions prior to 4.11.0 Description A stack overflow issue exists in the AT command APIs, which may allow code execution. Recommendations For versions prior to 4.11.0, update to version 4.11.0 or later to resolve the issue...
CVE-2019-11849: Out-of-bounds Write
A stack overflow vulnerabiltity exists in the AT command APIs of ALEOS before 4.11.0. The vulnerability may allow code execution...
PT-2020-9215
Name of the Vulnerable Software and Affected Versions ALEOS versions prior to 4.11.0 ALEOS version 4.9.4 Description The issue concerns several potential command injection vulnerabilities in the AT command interface. Recommendations For versions prior to 4.11.0, update to version 4.11.0 or later...
Researchers Warn of Flaw Affecting Millions of IoT Devices
Researchers are urging connected-device manufacturers to ensure they have applied patches addressing a flaw in a module used by millions of Internet-of-Things IoT devices. If exploited, researchers speculated that the flaw could allow attackers to knock out a city’s electricity or even overdose a...
zinshaus24.at Cross Site Scripting vulnerability OBB-1256100
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
weinshop24.at Cross Site Scripting vulnerability OBB-1255710
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-ze
Summary AT&T has released versions 1801-ze for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...
PT-2020-21780
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash involves the mbc case fold, string cmp ic, and match at functions...
CVE-2019-18254
BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with...
PT-2020-9952
Name of the Vulnerable Software and Affected Versions: BIOTRONIK CardioMessenger II affected versions not specified Description: The affected product does not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data...
safe7.at Cross Site Scripting vulnerability OBB-1208509
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35446)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server, which can be exploited by an attacker to cause a denial of service application crash with the help of the @ character before the JavaScript fiel...
PT-2020-8417
Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 4.5.0 Mattermost Server version 4.4.5 Mattermost Server version 4.3.4 Mattermost Server version 4.2.2 Description: The issue allows attackers to cause a denial of service, resulting in an application crash,...
python: email.utils.parseaddr wrongly parses email addresses
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...
PT-2021-6018
Name of the Vulnerable Software and Affected Versions urllib3 versions prior to 1.26.5 Description The issue is related to an HTTP client vulnerability in Python urllib3, which is associated with uncontrolled resource consumption. Exploitation of the vulnerability may allow a remote attacker to...
CVE-2020-13842
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. A dangerous AT command was made available even though it is unused. The LG ID is LVE-SMP-200010 June 2020...
CVE-2020-13839
An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 MTK chipsets. Code execution can occur via a custom AT command handler buffer overflow. The LG ID is LVE-SMP-200007 June 2020...
CVE-2020-13841
An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...
CVE-2020-13841
An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...
Command injection
An issue was discovered on LG mobile devices with Android OS 9 and 10 MTK chipsets. An AT command handler allows attackers to bypass intended access restrictions. The LG ID is LVE-SMP-200009 June 2020...