10798 matches found
Siemens SICAM A8000
1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SICAM A8000 Vulnerabilities: Use of Hard-coded Credentials, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a privileged user...
Prototype Pollution in node-forge debug API.
Impact The forge.debug API had a potential prototype pollution issue if called with untrusted input. The API was only used for internal debug purposes in a safe way and never documented or advertised. It is suspected that uses of this API, if any exist, would likely not have used untrusted inputs...
Path Traversal in rust-embed
When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...
GHSA-XRG3-HMF3-RVGW Path Traversal in rust-embed
When running in debug mode and the debug-embed off by default feature is not enabled, the generated get method does not check that the input path is a child of the folder given. This allows attackers to read arbitrary files in the file system if they have control over the filename given. The...
CVE-2021-30283
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-30283
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
Denial of service
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-30283
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2021-30283
CVE-2021-30283 concerns a Qualcomm/ Snapdragon-SoC DoS due to improper handling of traps in the debug registers of user applications. CNNVD lists affected Qualcomm products (e.g., QCA6391, QCM6490, QCS6490, QRB5165/5165N, SD778G, SD888 5G, SM7325P, WCN… variants) and confirms the root cause as tr...
CVE-2021-30283: Improper Handling of Exceptional Conditions
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...
PT-2022-9967
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to the improper handling of debug register traps from user applications, which can lead to a possible denial of service. This affects Qualcomm...
PT-2025-8332
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when the list for each entry safe macro is used with gadget giveback, allowing other routines to execute while ite...
rust-embed directory traversal vulnerability
rust-embed is the embedding of static assets into rust binaries. rust-embed versions prior to 6.3.0 have security vulnerabilities that can be exploited by attackers in debug mode to cause directory traversal...
GSD-2021-1002758 usb: xhci-mtk: fix list_del warning when enable list debug
usb: xhci-mtk: fix listdel warning when enable list debug This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.11 by commit...
PT-2021-27232
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a potential stack out-of-bounds OOB error in the scsi debug module of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2021-27182
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to a potential stack out-of-bounds OOB error in the scsi debug module of the Linux Kernel. The actual impact and attack plausibility have not yet been proven...
PT-2021-27234
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.11 Description The issue is related to a potential security vulnerability in the scsi debug module of the Linux Kernel. The problem arises when the kcalloc function is called with a size argument of zero. T...
PT-2021-27180
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue is related to a potential security vulnerability in the scsi debug module of the Linux Kernel. The problem arises when the kcalloc function is called with a size argument of zero. T...