Lucene search
+L

491 matches found

Cvelist
Cvelist
•added 2023/07/10 4:33 a.m.•54 views

CVE-2023-2234 BT HCI host union variant confusion

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

6.8CVSS9.2AI score0.00497EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/10 12:00 a.m.•6 views

CVE-2023-2234: Access of Resource Using Incompatible Type

Union variant confusion allows any malicious BT controller to execute arbitrary code on the Zephyr host...

8.8CVSS8.3AI score0.00497EPSS
SaveExploits0References3
Openbugbounty
Openbugbounty
•added 2023/05/12 12:23 p.m.•13 views

bt-ag.ch Cross Site Scripting vulnerability OBB-3326095

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Prion
Prion
•added 2023/03/24 8:15 p.m.•32 views

Design/Logic Flaw

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

1.7CVSS5.1AI score0.00091EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/03/24 12:00 a.m.•3 views

CVE-2023-20929

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

6.8CVSS0.00091EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/24 12:00 a.m.•8 views

CVE-2023-20929: Undefined Security Weakness

In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted broadcast intent. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS5.8AI score0.00091EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2023/02/16 5:41 a.m.•14 views

btmotors.ro Cross Site Scripting vulnerability OBB-3195216

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
•added 2023/02/12 4:15 a.m.•33 views

CVE-2022-47371

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

5.5CVSS5.3AI score0.00088EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/06 5:28 a.m.•41 views

CVE-2022-47371

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

5.6AI score0.00088EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/06 5:28 a.m.•76 views

CVE-2022-47371

The CVE-2022-47371 issue affects the bt driver (kernel component). A thread competition causes resources to be released early, which can enable local denial of service in the kernel. Documents consistently describe the vulnerability and impact as local DoS but do not provide confirmed exploit det...

5.5CVSS5.3AI score0.00088EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/06 12:00 a.m.•5 views

CVE-2022-47371: Use After Free

In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service in kernel...

5.5CVSS5.7AI score0.00088EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•20 views

PT-2023-15286 · Bt Driver · Bt Driver

Name of the Vulnerable Software and Affected Versions: bt driver affected versions not specified Description: The issue is related to a thread competition in the bt driver, which results in the early release of resources that are still to be accessed. This can lead to a local denial of service in...

5.5CVSS5.2AI score0.00088EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/12/27 1:14 p.m.•36 views

Denial Of Service (DoS)

bluez-firmware is vulnerable to denial of service DoS attacks. The library does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing an attacker to exhaust device BT resources and eventually trigger a crash vi...

6.5CVSS6.3AI score0.00581EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/18 12:00 a.m.•6 views

CVE-2022-22211: Allocation of Resources Without Limits or Throttling

A limitless resource allocation vulnerability in FPC resources of Juniper Networks Junos OS Evolved on PTX Series allows an unprivileged attacker to cause Denial of Service DoS. Continuously polling the SNMP jnxCosQstatTable causes the FPC to run out of GUID space, causing a Denial of Service to...

7.5CVSS7AI score0.0067EPSS
SaveExploits0References3
NVD
NVD
•added 2022/10/14 4:15 p.m.•44 views

CVE-2022-38983

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

9.8CVSS0.00774EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/14 4:15 p.m.•29 views

Design/Logic Flaw

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

7.5CVSS9.6AI score0.00774EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•3 views

CVE-2022-38983: Use After Free

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

9.8CVSS8.6AI score0.00774EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/14 12:00 a.m.•5 views

PT-2022-24639

Name of the Vulnerable Software and Affected Versions BT Hfp Client affected versions not specified Description The issue is related to a Use-After-Free UAF vulnerability in the BT Hfp Client module. This vulnerability may lead to arbitrary code execution if successfully exploited. Recommendation...

9.8CVSS6.4AI score0.00774EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/10/14 12:00 a.m.•11 views

CVE-2022-38983

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

9.7AI score0.00774EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/10/14 12:00 a.m.•47 views

CVE-2022-38983

The BT Hfp Client module has a Use-After-Free UAF vulnerability.Successful exploitation of this vulnerability may result in arbitrary code execution...

9.8AI score0.00774EPSS
SaveExploits0References2
Rows per page
Query Builder