1881 matches found
CVE-2024-34634
Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...
CVE-2024-34634
Samsung Notes contains an out-of-bounds read vulnerability in the parsing of the connected object list, affecting versions prior to 4.4.21.62. This allows a local attacker to access unauthorized memory. The issue is documented across multiple sources (e.g., CVE-2024-34634 entries in NVD/CVE lists...
PT-2024-26040 · Samsung · Samsung Notes
Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds write in applying connected information. This could potentially allow local attackers to execute arbitrary code with the privilege of Samsung Note...
CVE-2024-32865
Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices...
US senators ask FTC to investigate car makers’ privacy practices
An ongoing US Senate investigation indicated that connected car makers violate consumer privacy by sharing and selling drivers’ data, including their location, on a vast scale, and that the same car makers often obtain consumer consent through deception. Based on this investigation, senators have...
PT-2024-25959 · Unknown · Connectedhomeip Sdk
Name of the Vulnerable Software and Affected Versions: connectedhomeip SDK version 1.2 Description: The issue is related to an implementation problem in the Connectivity Standards Alliance Matter 1.2 protocol. This allows a third party to disclose information about devices that are part of the sa...
SUSE CVE-2022-48786
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED state when the connecting task wakes up with a signal pending. If this...
DEBIAN-CVE-2022-48786
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED state when the connecting task wakes up with a signal pending. If this...
UBUNTU-CVE-2022-48786
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED state when the connecting task wakes up with a signal pending. If this...
CVE-2022-48786 vsock: remove vsock from connected table when connect is interrupted by a signal
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED state when the connecting task wakes up with a signal pending. If this...
CVE-2022-48786 vsock: remove vsock from connected table when connect is interrupted by a signal
In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect expects that the socket could already be in the TCPESTABLISHED state when the connecting task wakes up with a signal pending. If this...
Timeout Error 4002 in Provisioning Server Console after Clicking "Show Connected Devices"
The following symptoms occur on Provisioning Services PVS Servers when there are multiple streaming NICs assigned to the PVS Server. Example An environment having five streaming NICs had the following symptoms: When Show Connected Devices was clicked in the PVS console, the following symptoms mig...
PrestaShop Security Breach
PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, SMS alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop Help Desk - Customer Support Management System version 2.4.0...
PT-2024-26280 · Unknown · Help Desk - Customer Support Management System
Name of the Vulnerable Software and Affected Versions: Help Desk - Customer Support Management System versions up to 2.4.0 Description: The issue allows a customer to upload .php files. Methods HelpdeskHelpdeskModuleFrontController::submitTicket and...
CVE-2024-38295
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
CVE-2024-38295
ALCASAR before 3.6.1 allows stillconnected.php remote code execution...
VulnCheck KEV: CVE-2024-24919
Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several...
SUSE CVE-2023-52861
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: it66121: Fix invalid connector dereference Fix the NULL pointer dereference when no monitor is connected, and the sound card is opened from userspace. Instead return an empty buffer of zeroes as the EDID information ...
CVE-2024-35941
This CVE (CVE-2024-35941) has concrete details in connected sources: a use-after-free in the Linux kernel net subsystem, due to skb->network_header overflow (u16) that makes skb_network_offset(skb) return a negative value. Consequently, __skb_pull() can move skb->data to memory outside skb-...
Motorola Ready For 安全漏洞
Motorola Ready For is a feature of Motorola USA Inc. It enhances the functionality of a cell phone by connecting it to any display or monitor1,2. A security vulnerability exists in Motorola Ready For that stems from the presence of an implicit intent vulnerability that could allow a local attacke...