1607 matches found
CVE-2023-33377
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, enabling attackers to execute arbitrary OS commands on devices...
PT-2023-5758 · Unknown · Connected Io
Name of the Vulnerable Software and Affected Versions: Connected IO versions 2.1.0 and prior Description: The issue is related to an argument injection vulnerability in the iptables command message of the communication protocol. This vulnerability enables attackers to execute arbitrary OS command...
Vulnerabilities exposed Peloton treadmills to malware and DoS attacks
By Habiba Rashid Internet-Connected Gym Equipment Raises Concerns Over Security Vulnerabilities! This is a post from HackRead.com Read the original post: Vulnerabilities exposed Peloton treadmills to malware and DoS attacks...
The vulnerability of the Connected User Experiences and Telemetry operating system service allows attackers to enhance their privileges.
The vulnerability of the Connected User Experiences and Telemetry services in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of Connected User Experiences and Telemetry Services for Windows operating systems allows attackers to execute processes with elevated privileges.
The vulnerability of Connected User Experiences and Telemetry Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute processes with elevated privileges through a specially created application...
Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-3261)
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.41i, NX-OS 5.0 before 5.03U22 on Nexus 3000 devices, NX-OS 4.1 before 4.12E11l on Nexus 4000 devices, NX-OS 5.x before 5.13N11 on Nexus 5000 devices, NX-OS 5...
kernel: net/ulp: use-after-free in listening ULP sockets
A use-after-free flaw was found in the Linux kernel’s TLS protocol functionality in how a user installs a tls context struct tlscontext on a connected TCP socket. This flaw allows a local user to crash or potentially escalate their privileges on the system...
WordPress Connected Sermons Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
Software Connected Sermons Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c3e345f223ee Credits Rafie Muhammad Patchstack Requir...
CVE-2023-35353
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35353
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35353
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35320
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35320
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35320
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
Privilege escalation
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...
CVE-2023-35353 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2023-35320 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2023-35320 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
CVE-2023-35320
CVE-2023-35320 corresponds to a Windows vulnerability described as an elevation of privilege in Connected User Experiences and Telemetry. Connected documents provide a high‑level reference and list this CVE among Windows vulnerabilities, noting an elevation of privilege with vague, non‑specific d...
