2097 matches found
CVE-2024-41917
Intel Battery Life Diagnostic Tool software before version 2.4.1 is affected by a time-of-check time-of-use race condition that may allow an authenticated, low-privilege user with local access to escalate privileges. Documented by multiple sources (Intel advisory INTEL-SA-01230 and redundantly re...
Intel Battery Life Diagnostic Tool 安全漏洞
Intel Battery Life Diagnostic Tool is a battery life analysis software from Intel Corporation USA. A security vulnerability exists in Intel Battery Life Diagnostic Tool versions prior to 2.4.1, which stems from the presence of a competitive condition that could allow an authenticated user to enab...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: iouring/tctx: A workaround has been implemented for the allocation error issue with xastore. The syzbot triggered the following WARNON: WARNING: CPU: 0, PID: 16, in iouring/tctx.c, line 51: iouringfree+0xfa/0x140. The warning...
Intel® Battery Life Diagnostic Tool Software Advisory
Summary: A potential security vulnerability in some Intel® Battery Life Diagnostic Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-41917 Description: Time-of-check time-of-use rac...
CVE-2021-44171
A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through 6.2.10, FortiOS version 6.4.0 through 6.4.8, FortiOS version 7.0.0 through 7.0.3 allows attacker to execute privileged command...
CVE-2022-36278
Insufficient control flow management in the IntelR Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-5138
An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker...
CVE-2024-43053
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information...
CVE-2024-10476
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: update to NSS 3.101.2 ChaChaXor to return after the function update to NSS 3.101.1 missing sqlite header. GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME. update to NSS 3.101 add diagnostic assertions for SFTKObject refcount. freeing...
Mercedes-Benz Head Unit security research report
Introduction This report covers the research of the Mercedes-Benz Head Unit, which was made by our team. Mercedes-Benz's latest Head Unit infotainment system is called Mercedes-Benz User Experience MBUX. We performed analysis of the first generation MBUX. MBUX was previously analysed by KeenLab...
PT-2024-17848 · Overtek · Overtek Ot-E801G
Name of the Vulnerable Software and Affected Versions: Overtek OT-E801G version OTE801G65.1.1.0 Description: A critical issue was found in the Overtek OT-E801G, affecting the file /diag ping.cmd. This issue leads to os command injection when the action parameter is set to test and the ipaddr...
sos bug fix and enhancement update
An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...
CVE-2024-10476
Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a stack buffer overflow vulnerability that stems from a missing boundary check in the MTKFLPMSGHALDIAGREPORTDATANTF handler of flp2halinterface.c, which can be exploited by an attacker to cause a local...
PT-2024-10669 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible stack buffer overflow in the MTK FLP MSG HAL DIAG REPORT DATA NTF handler of flp2hal interface.c due to a missing...
CVE-2024-9200
A post-authentication command injection vulnerability in the "host" parameter of the diagnostic function in Zyxel VMG4005-B50A firmware versions through V5.15ABQA.2.2C0 could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable devi...
CVE-2024-9200
CVE-2024-9200 describes a post-authentication command injection in the Zyxel VMG4005-B50A diagnostic function via the vulnerable host parameter. A user with administrator privileges can trigger OS commands on the device. Affected firmware: through V5.15(ABQA.2.2)C0. Root cause: lack of input hand...
PT-2024-9042 · Zyxel · Zyxel Vmg4005-B50A
Name of the Vulnerable Software and Affected Versions: Zyxel VMG4005-B50A firmware versions through V5.15ABQA.2.2C0 Description: The issue is related to a post-authentication command injection vulnerability in the host parameter of the diagnostic function. This vulnerability could allow an...