717 matches found
PT-2021-20167
Name of the Vulnerable Software and Affected Versions OpenPLC runtime versions V3 through 2016-03-14 Description The issue allows stored XSS via the Device Name to the web server's "Add New Device" page. This can lead to malicious script execution when the page is accessed. Recommendations For...
OpenPLC 跨站脚本漏洞
OpenPLC is an open source programmable logic controller. It can provide low-cost industrial solutions for automation and research. A cross-site scripting vulnerability exists in OpenPLC runtime V3, which stems from the Device Name on the Add New Device page of the product failing to properly...
CVE-2021-3351: Improper Neutralization of Input During Web Page Generation
OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page...
SUSE-SU-2021:14724-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-3483: Fixed a use-after-free in nosy.c bsc1184393. - CVE-2021-30002: Fixed a memory leak for large arguments in videousercopy bsc1184120. -...
In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8 the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination aka CID-cc7a0bb058b8.
...
CVE-2021-28972
In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because...
UBUNTU-CVE-2021-28972
In drivers/pci/hotplug/rpadlparsysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because...
PT-2021-2511 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.11.8 Description: The issue is related to a user-tolerable buffer overflow in the RPA PCI Hotplug driver when writing a new device name to the driver from userspace, allowing userspace to write data to the kern...
OPENSUSE-SU-2020:2053-1 Security update for wpa_supplicant
This update for wpasupplicant fixes the following issues: Security issue fixed: - CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed: - Enable SAE support jscSLE-14992. - Limit P2PDEVICE name to appropriate ifname size. - Fix wicked wlan...
CVE-2020-27524
On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...
Design/Logic Flaw
This issue was resolved by replacing device names with a random identifier. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15, watchOS 6, tvOS 13. An attacker in physical proximity may be able to passively observe device names in AWDL communications...
PT-2020-14773
Name of the Vulnerable Software and Affected Versions Mercedes-Benz COMAND infotainment software affected versions not specified Description The issue concerns the Bluetooth stack in the COMAND infotainment software, which fails to properly handle %x and %c format-string specifiers in a device...
CVE-2019-16213
Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted string, an attacker could modify the device name of an attached PLC adapter to inject and execute arbitrary commands on the system wi...
Cannot renew Remote Desktop Cal on MacBook
In VDA server, if MacBook Device name longer than 15 characters, there is an issue on renew RDS cals License. The eventlog has a 1028 warning with TerminalService-RemoteConnectionManger. Hence the user cannot use the XenApp normally...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
PT-2020-19930
Name of the Vulnerable Software and Affected Versions Ruckus R500 version 3.4.2.0.384 Description The issue allows for cross-site scripting XSS attacks via the Device Name field in the index.asp page. Recommendations For Ruckus R500 version 3.4.2.0.384, avoid using the Device Name field in the...