15029 matches found
The vulnerability in the DVB driver (driver/media/dvb-core/dvbdev.c) of the Linux operating system allows a hacker to cause a service failure or gain increased privileges.
The vulnerability in the DVB driver drivers/media/dvb-core/dvbdev.c of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...
The vulnerability of the Linux operating system’s DVB driver allows a hacker to cause a service failure or gain increased privileges.
The vulnerability of the Linux operating system’s DVB kernel driver is related to the use of previously freed memory in the drivers/media/dvb-core/dvbcaen50221.c file when the device is closed, provided that it was turned off beforehand. Exploiting this vulnerability can allow an attacker to caus...
(Pwn2Own) Western Digital MyCloud PR4100 FTP Server Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100 NAS devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FTP server. The issue results from the lack of...
(Pwn2Own) Western Digital MyCloud PR4100 DDNS Response Processing Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of DDNS responses. The issue results from the lack...
DEBIAN-CVE-2023-0401
A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In case the hash algorithm used for the signature is known to the OpenSSL library but the implementation of the hash algorithm is not available the digest initialization will fail...
PT-2023-3181 · Western Digital +1 · Western Digital My Cloud Os 5 +2
Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home versions prior to 9.4.0-191 Western Digital My Cloud Home Duo versions prior to 9.4.0-191 SanDisk ibi versions prior to 9.4.0-191 Western Digital My Cloud OS 5 versions prior to 5.26.202 Description: A Path...
The vulnerability of the Adobe Digital Editions e-book reading program, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Digital Editions e-book reading program relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malware file...
A Cybersecurity Risk Assessment Guide for Leaders
Cybersecurity risk assessment provides the continuous asset detection, analysis, prioritization, and risk scoring needed to keep pace with a continuously growing digital attack surface...
UBUNTU-CVE-2023-0217
An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by the EVPPKEYpubliccheck function. This will most likely lead to an application crash. This function can be called on public keys supplied from untrusted sources which could allo...
CVE-2021-36224
Western Digital My Cloud devices before OS5 have a nobody account with a blank password...
CVE-2021-36226
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files...
CVE-2021-36224
Western Digital My Cloud devices before OS5 have a nobody account with a blank password...
CVE-2021-36225
Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation...
CVE-2021-36224
Western Digital My Cloud devices before OS5 have a nobody account with a blank password...
CVE-2021-36226
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files...
Information disclosure
Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation...
CVE-2021-36226
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files...
CVE-2021-36224
CVE-2021-36224 affects Western Digital My Cloud devices prior to OS5, where a nobody account exists with a blank password. This enables unauthorized access over the network with no user interaction and no privileges required, leading to high confidentiality, integrity, and availability impact per...
CVE-2021-36226
Western Digital My Cloud devices prior to OS5 are vulnerable due to firmware upgrade files not being cryptographically signed. The root cause is the lack of signature verification for firmware updates, enabling potential tampering with updates and impacting integrity and availability. Reported as...
