Cisco IOS Software TACACS+ Authentication Bypass (cisco-sa-ios-tacacs-hdB7thJw)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This...

The vulnerability of the formArpBindConfig() function in the UTT 1200GW network device software allows a attacker to cause a service failure.

The vulnerability of the formArpBindConfig function in the UTT 1200GW network device software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

EUVD-2019-5757

Malware in sbrugna...

EUVD-2010-2603

Malware in sbrugna...

EUVD-2018-9336

Malware in sbrugna...

EUVD-2022-39116

Malicious code in bioql PyPI...

The vulnerability of the web interface of the microprogramming software for the routing and switching platform RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, SCALANCE XR-300 (6GK5334-xTSxx) Series, allows a attacker to cause a service failure.

The vulnerability of the web interface of the microprogramming software for the RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, and SCALANCE XR-300 6GK5334-xTSxx Series devices is related to deficiencies in...

The vulnerability of the Traffic Service service (traffic_stat/traffic_service/traffic_service.c) in the network device software developed by ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Traffic Service service trafficstat/trafficservice/trafficservice.c of the network card microprogramming software from ASR Microelectronics, models ASR1803L, ASR1806, ASR1901, and ASR1903L, is related to improper cleaning or release of resources. Exploiting this...

The vulnerability of the UnlockSmtpSettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems allows a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.

The vulnerability of the UnlockSmtpSettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass...

CVE-2024-21814

Uncontrolled search path for some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2021-24046

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0...

The vulnerability of the LockWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the LockWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the WebImageMonitor component of the microprogramming software for Ricoh multifunctional devices allows a hacker to execute arbitrary code.

The vulnerability of the WebImageMonitor component of the microsoftware for multifunctional Ricoh devices relates to reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted network request remotely...

Blue Screen with Error Code 0x0000007B When Booting a Target from a vDisk Using Target Device Software 6.x or 7.x

When booting a Target from a vDisk using Target Device Software 6.x or 7.x, you might get a Blue Screen with error code 0x0000007B and the following error description: “ERROR: SOCKET…” The error description will contain additional values as shown in the following screen shot:...

Error: "vDisk is not available. Please check your network PXE boot configuration and restart Imaging Wizard" or "Red X" on Provisioning Server

After installing the Target Device Software and rebooting the following symptoms can be seen: A Red X is displayed on top of the vDisk Status Applet in the Tray Bar After running the Imaging Wizard and rebooting the following message is shown:"vDisk is not available. Please check your network PXE...

Azure IoT Platform Device SDK Remote Code Execution Vulnerability

...

The vulnerability of Netgear ProSafe NMS300 network devices’ microprogramming software, related to the use of default credentials, allows attackers to escalate their privileges.

The vulnerability of Netgear ProSafe NMS300 network device software relates to the use of default login credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-21814

Uncontrolled search path for some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Chipset Device Software 安全漏洞

Intel Chipset Device Software is a chipset firmware update utility from Intel Corporation USA. A security vulnerability previously existed in Intel Chipset Device Software version 10.1.19444.8378, which stemmed from an uncontrolled search path issue. It could allow an authenticated user to perfor...