2905 matches found
CVE-2022-31256
A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...
CVE-2022-31256
CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...
CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script
A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...
CVE-2022-31256 sendmail: mail to root privilege escalation via sm-client.pre script
A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...
CVE-2022-29477
An authentication bypass vulnerability exists in the web interface /action/factory functionality of Abode Systems, Inc. iota All-In-One Security Kit 6.9X and 6.9Z. A specially-crafted HTTP header can lead to authentication bypass. An attacker can send an HTTP request to trigger this vulnerability...
MED - NFTs become no longer holographable once new factory is connected.
Lines of code Vulnerability details Description The basic premise of the Holograph platform is that NFTs / ERC20s are holographable, in other words they will have the same address across all ERC20 compatible blockchains. This invariant is used countless times in the code base. For example, when...
CVE-2021-44769
An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service DoS condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...
CVE-2021-44769
An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service DoS condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...
CVE-2021-44769 TLS Certificate Generation Function Improper Input Validation
An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service DoS condition which can only be reverted via a factory reset. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...
CVE-2021-44769
CVE-2021-44769 describes an improper input validation vulnerability in the TLS certificate generation function of Lanner IAC-AST2500A standard firmware 1.10.0 . The root cause is input validation flaws in the TLS certificate generation feature, which can trigger a denial-of-service condition. The...
PT-2022-12228 · Lanner · Iac-Ast2500A
Name of the Vulnerable Software and Affected Versions: Lanner Inc IAC-AST2500A standard firmware version 1.10.0 Description: An improper input validation vulnerability in the TLS certificate generation function allows an attacker to cause a Denial-of-Service DoS condition. This condition can only...
Abode Iota 信任管理问题漏洞
Abode Iota is a reliable Diy home security system from Abode. A trust management issue vulnerability exists in Abode Iota All-In-One Security Kit versions 6.9X and 6.9Z, which stems from an authentication bypass in the web interface /action/factory functionality, which can be exploited by an...
SUSE SLES15 / openSUSE 15 Security Update : clone-master-clean-up (SUSE-SU-2022:3667-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3667-1 advisory. - CVE-2021-32000: Fixed some potentially dangerous file system operations bsc1181050. Bugfixes: - Fixed clone-master-clean-up...
CVE-2022-39064
An attacker sending a single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI bulb blink, and if they replay i.e. resend the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness...
Design/Logic Flaw
An attacker sending a single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI bulb blink, and if they replay i.e. resend the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness...
CVE-2022-39064
An attacker sending a single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI bulb blink, and if they replay i.e. resend the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness...
CVE-2022-39064
An attacker sending a single malformed IEEE 802.15.4 Zigbee frame makes the TRÅDFRI bulb blink, and if they replay i.e. resend the same frame multiple times, the bulb performs a factory reset. This causes the bulb to lose configuration information about the Zigbee network and current brightness...
Rockwell Automation Factory Talk VantagePoint Access Control Error Vulnerability
Rockwell Automation Factory Talk VantagePoint is an advanced industrial application ecosystem from Rockwell Automation, Inc. An access control error vulnerability exists in Rockwell Automation Factory Talk VantagePoint, which stems from improper access control of its FactoryTalk VantagePoint...
