659 matches found
K2dobj.dl Buffer Overflow DoS
The vulnerability of the K2dobj.dl library in the KOMPAS-3D 3D modeling system is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause a service failure using a specially crafted CDW format file...
CVE-2020-11144
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...
PT-2021-9187
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue arises from a buffer over-read that occurs when a UE process attempts to decompress an invalid DL ROHC packet. This happens due to the lack of a size check for the...
CVE-2020-11144: Improper Input Validation
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...
dl-c.ch Cross Site Scripting vulnerability OBB-1495729
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
auto-dl (0.1.1), aws-lambda-sls (0.1.0) +53 more potentially affected by CVE-2019-20916 via pip (>=1.5.6, <=19.1.1)
pip PYPI version =1.5.6, =0.0.0, =0.1.17, =1.0.1, =1.5.114, =3.4.13, =1.0.0, =2.1.1.16070820, =2.1.1.16072018, =2.1.1.16070812, =2.4.0, =1.5.6, =1.5.8 and more Source cves: CVE-2019-20916 Source advisory: MEND:CVE-2019-20916...
GHSA-X48M-GP6R-GP4V Malicious Package in rate-map
Version 1.0.3 of rate-map contains malicious code. The malware breaks functionality of the purescript-installer package by rewriting code of the dl-tar dependency. Recommendation Upgrade to version 1.0.5 or later. There is no indication of further compromise...
PT-2020-21578
Name of the Vulnerable Software and Affected Versions rate-map version 1.0.3 Description The issue concerns malicious code in version 1.0.3 of the rate-map package, which affects the functionality of the purescript-installer package by altering the code of the dl-tar dependency. Recommendations F...
dl-schwabe.de Cross Site Scripting vulnerability OBB-1214786
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
consreg (>=1.1.0, <=1.1.7), deeppavlov (>=0.0.5.1, <=0.0.5.3) +5 more potentially affected by CVE-2020-13091 via pandas (0.21.1)
pandas PYPI version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on pandas and may be impacted: - consreg =1.1.0, =0.0.5.1, =1.2.0, =0.4.36, =0.0.1rc0, =0.0.1rc1 - pyplanet 0.5.4 - sqlep 0.0.1 Source cves: CVE-2020-13091 Source advisory:...
[SECURITY] Fedora 31 Update: pure-ftpd-1.0.49-5.fc31
Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...
CVE-2019-10554: Out-of-bounds Read
Multiple Read overflows issue due to improper length check while decoding Identity Request in CSdomain/Authentication Reject in CS domain/ PRAU accept/while logging DL message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...
CVE-2019-19758: URL Redirection to Untrusted Site
A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page...
Design/Logic Flaw
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...
PT-2019-14464
Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description An issue was discovered that allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network...
PT-2019-14465
Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description The issue is related to insecure key transport in ZigBee communication, allowing attackers to obtain sensitive information, cause...
CVE-2019-15910: Improper Input Validation
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Attackers can utilize the "discover ZigBee network procedure" to perform a denial of service attack...
CVE-2019-15911: Cleartext Transmission of Sensitive Information
An issue was discovered on ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices using ZigBee PRO. Because of insecure key transport in ZigBee communication, attackers can obtain sensitive information, cause the multiple denial of service attacks, take over smart home devices, and...
PT-2019-14466
Name of the Vulnerable Software and Affected Versions ASUS HG100, MW100, WS-101, TS-101, AS-101, MS-101, DL-101 devices affected versions not specified Description An issue was discovered that allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin...
NewStart CGSL MAIN 5.04 : glibc Multiple Vulnerabilities (NS-SA-2019-0012)
The remote NewStart CGSL host, running version MAIN 5.04, has glibc packages installed that are affected by multiple vulnerabilities: - elf/dl-load.c in ld.so in the GNU C Library aka glibc or libc6 through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the...