491 matches found
CVE-2020-14930: Cleartext Transmission of Sensitive Information
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but i...
PT-2020-9974
Name of the Vulnerable Software and Affected Versions: Cypress CYW20735 evaluation board affected versions not specified WICED Studio versions 6.2 through 6.4 Description: The issue is caused by a buffer overflow that occurs when data exceeds 384 bytes. This happens because the maximum BLOC buffe...
bt-database.be Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1151538 Security Researcher gdattacker Helped patch 172 vulnerabilities Received 3 Coordinated Disclosure badges Received 20 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting bt-database.be website a...
bt-50.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144419 Security Researcher kun-fly Helped patch 668 vulnerabilities Received 7 Coordinated Disclosure badges Received 43 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting bt-50.com website and its...
CVE-2019-13916
An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...
Heap overflow
An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...
CVE-2019-13916
An issue was discovered in Cypress formerly Broadcom WICED Studio 6.2 CYW20735B1 and CYW20819A1. As a Bluetooth Low Energy BLE packet is received, it is copied into a Heap ThreadX Block buffer. The buffer allocated in dhmulpgetRxBuffer is four bytes too small to hold the maximum of 255 bytes plus...
Buffer overflow
Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag...
Wireshark Security Updates (wnpa-sec-2020-02) - Windows
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
Wireshark Security Updates (wnpa-sec-2020-02) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
PT-2020-8546
Name of the Vulnerable Software and Affected Versions: Tizen versions prior to 5.0 M1 Tizen-based firmwares including Samsung Galaxy Gear series before build RE2 Description: The issue arises from improper D-Bus security policy configurations in the bt/bt core system service, allowing an...
CVE-2018-16265: Improper Privilege Management
The bt/btcore system service in Tizen allows an unprivileged process to create a system user interface and control the Bluetooth pairing process, due to improper D-Bus security policy configurations. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series...
Security fix for the ALT Linux 10 package wireshark version 3.0.8-alt1
Jan. 21, 2020 Anton Farygin 3.0.8-alt1 - 3.0.8 - disabled sharkd build - fixes: BT ATT dissector crash. CVE-2020-7045...
MGASA-2020-0044 Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
Updated wireshark packages fix security vulnerability
Updated wireshark packages fix security vulnerability: BT ATT dissector crash CVE-2020-7045...
CVE-2020-7045
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes...
CVE-2020-7045
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes...
CVE-2020-7045
In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes...