1896 matches found
Insufficient Authorization
github.com/mattermost/mattermost/ is vulnerable to Insufficient Authorization. The vulnerability is caused due to insufficient scoping of WebSocket responses to authorised users, resulting in Websocket responses being broadcasted to everyone in the channel...
PT-2024-14838 · Genie Company · Aladdin Connect
Name of the Vulnerable Software and Affected Versions: Genie Company Aladdin Connect garage door opener Retrofit-Kit Model ALDCM affected versions not specified Description: The Genie Company Aladdin Connect garage door opener is vulnerable to XSS via a broadcast SSID name containing malicious co...
Mattermost Security Vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the inability to scope WebSocket responses to each user separately, causing WebSocket to broadcast information about who was notified of...
CVE-2023-49242
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49242
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49242
Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49242
CVE-2023-49242 affects Huawei HarmonyOS in the running management module, described as a “free broadcast vulnerability.” The vulnerability may compromise service confidentiality if exploited. The NVD entry lists CVSS v3.1 base score 7.5 (Network) with Low attack complexity and no user interaction...
PT-2023-31129 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A free broadcast vulnerability exists in the running management module. This issue may impact service confidentiality if successfully exploited. Recommendations: At the moment, ther...
CVE-2023-42564
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege...
CVE-2023-33081
Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...
Improper access control
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege...
CVE-2023-33081 Buffer over-read in WLAN Firmware
Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...
CVE-2023-33081
CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...
CVE-2023-42564
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a broadcast vulnerability in the runtime management module. Successful exploitation of...
CVE-2023-45776
In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2023-29688 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write due to a missing bounds check in the CreateAudioBroadcast function. This could lead to local...
PT-2023-24175 · Qualcomm · Snapdragon +133
Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while converting TWT Target Wake Time frame parameters in the OTA...
PT-2023-30187 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability in the remote PIN module that causes incorrect information storage locations, potentially affecting confidentiality...