fb-stainless.com Cross Site Scripting vulnerability OBB-2975006

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-34542

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.327 Description The issue is related to a potential divide by zero error in the fb pm2fb function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-34449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.292 Description A potential divide by zero error in the fb pm2fb function of the Linux Kernel may pose a security risk. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-33984 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.141 Description: The issue is related to a potential divide by zero error in the fb pm2fb function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

GSD-2022-1005362 drm/fb-helper: Fix out-of-bounds access

drm/fb-helper: Fix out-of-bounds access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33264

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.7 Description A potential divide by zero error in the fb pm2fb function of the Linux Kernel may pose a security risk. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-33672

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.65 Description A potential divide by zero error was identified in the fb pm2fb function of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33299

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.6 Description The issue is related to data-races around sysctl fb tunnels only for init net. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-33620 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: The issue concerns an out-of-bounds access in the drm/fb-helper component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

Privilege escalation

DISPUTED Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's...

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

CVE-2022-38625

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

CVE-2022-38625

Affected product: Patlite NH-FB (versions 1.46 and earlier). Issue: Insufficient firmware validation during the upgrade firmware file upload process, enabling authenticated attackers to upload their own custom firmware and inject malicious code. Root cause / details: Documented as a design choice...

Patlite 数据伪造问题漏洞

Patlite is a network monitoring indicator from Patlite Japan. It is used to detect network anomalies with instant notification by light, sound and email. A data forgery issue vulnerability exists in Patlite NH-FB v1.46 and earlier versions, which stems from insufficient firmware validation. The...

PT-2022-24489 · Patlite · Patlite Nh-Fb

Name of the Vulnerable Software and Affected Versions: Patlite NH-FB versions 1.46 and below Description: The issue is related to insufficient firmware validation during the upgrade firmware file upload process. This allows authenticated attackers to create and upload their own custom-built...

CVE-2022-38625: Insufficient Verification of Data Authenticity

Patlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during the upgrade firmware file upload process. This vulnerability allows authenticated attackers to create and upload their own custom-built firmware and inject malicious code. NOTE: the vendor's position i...

Malicious Browser Extensions Targeted Over a Million Users So Far This Year

More than 1.31 million users attempted to install malicious or unwanted web browser extensions at least once, new findings from cybersecurity firm Kaspersky show. "From January 2020 to June 2022, more than 4.3 million unique users were attacked by adware hiding in browser extensions, which is...

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...

CVE-2022-35911

On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced...