8205 matches found
PT-2023-23672 · Bosch · Bosch Ip Cameras
Name of the Vulnerable Software and Affected Versions: Bosch IP cameras of family CPP13 and CPP14 affected versions not specified Description: The issue arises from an error in the software interface to the secure element chip. This error can cause permanent damage to the chip when the Stream...
CVE-2023-32229: Improper Write Handling in Limited-write Non-Volatile Memories
Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256...
Bosch IP cameras have vulnerabilities related to resource management.
Bosch IP cameras are network cameras from Bosch, Germany. A resource management error vulnerability exists in Bosch Camera CPP13 firmware versions prior to 8.48 and CPP14 firmware versions 8.50 through 8.72, which is caused due to an error in the software interface of the security element chip...
CVE-2023-26062
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
CVE-2023-26062
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
CVE-2023-26062
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
Code injection
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
CVE-2023-26062: Improper Privilege Management
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
CVE-2023-26062
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
CVE-2023-26062
Nokia Web Element Manager before 22 R1 is affected by an internal fault allowing an authenticated, unprivileged user to execute administrative functions. Exploitation is restricted to the CSP mobile network solution internal BTS management network and is not possible from mobile devices, roaming ...
CVE-2023-26062
A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administrative functions. Exploitation is not possible from outside of mobile network solution architecture. This means that exploit is not possibl...
PT-2023-20458 · Nokia · Nokia Web Element Manager
Name of the Vulnerable Software and Affected Versions: Nokia Web Element Manager versions prior to 22 R1 Description: A mobile network solution internal fault is found in Nokia Web Element Manager, where an authenticated, unprivileged user can execute administrative functions. Exploitation is not...
Nokia Web Element Manager security vulnerabilities
Nokia Web Element Manager is a network management tool from Nokia of Finland for managing and monitoring Nokia network devices and solutions. A security vulnerability exists in Nokia Web Element Manager versions prior to 22 R1, which originates from an internal failure in the mobile web solution...
ALPINE-CVE-2023-2454
schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...
DEBIAN-CVE-2023-2454
schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code...
EulerOS 2.0 SP5 : expat (EulerOS-SA-2023-2143)
According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Expat aka libexpat before 2.4.5, an attacker can trigger stack exhaustion in buildmodel via a large nesting depth in the DTD element...
Apache Guacamole injection vulnerability
Apache Guacamole is a clientless remote desktop gateway from the Apache USA Foundation. The product supports protocols such as VNC, RDP and SSH. An injection vulnerability exists in Apache Guacamole 1.5.1 and earlier versions, which stems from the possibility of incorrectly calculating the length...
curl: SFTP path ~ resolving discrepancy
A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user's home directory. Attackers can...