9968 matches found
CVE-2023-28587 Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...
CVE-2023-28587
CVE-2023-28587 describes a memory corruption issue in Qualcomm Chipsets’ Bluetooth (BT) controller, occurring when parsing debug commands with specific sub-opcodes at the HCI interface level. The underlying root cause is an improper handling of memory buffers, leading to memory corruption during ...
PT-2023-29196 · Dell +1 · Dell Poweredge +2
Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS version 1.4.4 Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit...
FortiWeb VM 7.4.0 build577 CLI Crash
;; ;; FortiWeb VM v7.4.0 build577 Post-auth CLI Crash ;; ;; ... ;; ;; code610 / some debug notes fyi ;; ;; 17.11.2023 @ 23:33 ;; FortiWeb diagnose debug crashlog show 2023-11-16 05:07:00 application cli 2023-11-16 05:07:00 signal Segmentation fault received 2023-11-16 05:07:00 RIP 00007fdd1febf44...
PT-2023-29197 · Dell · Dell Poweredge +1
Name of the Vulnerable Software and Affected Versions: Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS version 1.4.4 Description: The issue concerns active debug code security vulnerability in the BIOS. An unauthenticated physical attacker could potentially exploit this, leadin...
CVE-2023-28587: Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...
CVE-2023-44298: Hardware Internal or Debug Modes Allow Override of Locks
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service...
CVE-2023-40463
When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the common root password for that version in a directory accessible to a user with root privileges or equivalent access...
Sierra Wireless ALEOS Trust Management Issue Vulnerability
Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A vulnerability with trust management issues exists in Sierra Wireless ALEOS 4.16 and prior versions, which stems from a user being able to gain root privileges or...
PT-2023-21834 · Qualcomm · Qualcomm Chipsets
Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the BT controller when parsing debug commands with specific sub-opcodes at the HCI interface level. Recommendations: At the moment,...
Fedora: Security Advisory for golang-github-google-dap (FEDORA-2023-548163deb1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2023-fa2ec3d3e0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for golang-github-google-dap (FEDORA-2023-c858d2c53b)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: golang-github-google-dap-0.11.0-1.fc38
Go implementation of the Debug Adapter Protocol...
[SECURITY] Fedora 39 Update: golang-github-google-dap-0.11.0-1.fc39
Go implementation of the Debug Adapter Protocol...
[SECURITY] Fedora 37 Update: golang-github-google-dap-0.11.0-1.fc37
Go implementation of the Debug Adapter Protocol...
NETGEAR ProSAFE Network Management System Access Control Error Vulnerability
NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. An Access Control Error vulnerability exists in the NETGEAR ProSAFE Network Management System that originates from an unauthenticated...
The vulnerability in the implementation of the Java Debug Wire Protocol (JDWP) of the ProSAFE Network Management System (NMS300) allows a perpetrator to execute arbitrary code.
The vulnerability of the Java Debug Wire Protocol implementation in the ProSAFE Network Management System NMS300 lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary code by connecting to port 11611...
Denial Of Service (DoS)
xen is vulnerable to Denial Of Service DoS. The vulnerability exists because any guest PV or HVM utilizing Debug Masks for its own purposes can cause incorrect behavior in an unrelated HVM vCPU. This issue is likely to result in a guest crash...
