491 matches found
CVE-2021-34145: Undefined Security Weakness
The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...
PT-2021-4305
Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 devices Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of LMP max slot with an invalid Baseband packet type and...
CVE-2021-34144: Undefined Security Weakness
The Bluetooth Classic implementation in the Zhuhai Jieli AC6366C BT SDK through 0.9.1 does not properly handle the reception of truncated LMPSCOLinkRequest packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections disabling the AB5301A inqui...
PT-2021-4358
Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 devices Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of LMP max slot with a greater ACL Length after completi...
PT-2021-4304
Name of the Vulnerable Software and Affected Versions Cypress WICED BT stack versions through 2.9.0 for CYW20735B1 Description The Bluetooth Classic implementation in the Cypress WICED BT stack does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple...
CVE-2021-34147: Undefined Security Weakness
The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 does not properly handle the reception of a malformed LMP timing accuracy response followed by multiple reconnections to the link slave, allowing attackers to exhaust device BT resources and eventually...
PT-2021-16095
Name of the Vulnerable Software and Affected Versions Bold Page Builder WordPress plugin versions prior to 3.1.6 Description The issue arises from the bt bb get grid AJAX action passing user input into the unserialize function without validation or sanitization, potentially leading to a PHP Objec...
CVE-2021-0286: Improper Check or Handling of Exceptional Conditions
A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager evo-aftmand-bt or evo-aftmand-zx process to crash and restart, impacting all traff...
CVE-2021-25406
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information...
Information disclosure
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information...
CVE-2021-25406
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information...
CVE-2021-25406
CVE-2021-25406 affects Gear S Plugin prior to 2.2.05.20122441. The vulnerability is an information exposure where untrusted applications can access information about connected Bluetooth devices via the Gear S Plugin. The sources consistently describe an information disclosure impact but do not pr...
CVE-2021-25406: Insecure Storage of Sensitive Information
Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information...
PT-2021-15858
Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the lack of sanitization of certain parameters before they are used in SQL statements, leading to SQL Injection issues. The parameters bt...
Book Sale: Beyond Fear
I have 80 copies of my 2000 book Beyond Fear available at the very cheap price of $5 plus shipping. Note that there is a 20% chance that your book will have a "BT Counterpane" sticker on the front cover. Order your signed copy here...
Congratulations to 2020 Akamai Partners of the Year
Last year proved to be a year like no other. We faced unforeseen challenges, including adjusting to a new way of working, collaborating, and conducting business. It is an honor for me to announce the Akamai Partners of the Year for 2020 who went above and beyond in this tumultuous year. These...
BASETech GE-131 BT-1837836 Directory Traversal Vulnerability
The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. A directory traversal vulnerability exists in the BASETech GE-131 BT-1837836. An attacker can exploit this vulnerability to access sensitive information...
CVE-2020-27553
In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with network access to the web-server to download any files from the “/etc” folder without authentication. No path traversal sequences are neede...
CVE-2020-27554
Cleartext Transmission of Sensitive Information vulnerability in BASETech GE-131 BT-1837836 firmware 20180921 exists which could leak sensitive information transmitted between the mobile app and the camera device...