PT-2023-21457 · Apple · Airpods

Name of the Vulnerable Software and Affected Versions: AirPods Firmware versions prior to 5E133 Description: An authentication issue was addressed with improved state management. When the headphones are seeking a connection request to one of the previously paired devices, an attacker in Bluetooth...

PT-2023-7445 · Canon · I-Sensys Mf640C Series +10

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware versions prior to Ver.11.05 Canon imageCLASS LBP660C Series/LBP 620C Series/X LBP1127C/MF740C Series/MF640C Series/X MF1127C firmware versions prior to...

PT-2023-22412 · Asus · Asus Rt-Ac51U

Name of the Vulnerable Software and Affected Versions: ASUS RT-AC51U wireless router firmware versions up to and including 3.0.0.4.380.8591 Description: A Cross-site scripting XSS vulnerability in the System Log/General Log page of the administrator web UI allows remote attackers to inject...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

PT-2023-22514 · Magicjack · Magicjack A921 Usb Phone Jack

Name of the Vulnerable Software and Affected Versions: MagicJack A921 USB Phone Jack versions prior to Rev 3.0 V1.4 Description: The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/write access. Attackers can...

Siemens Multiple RTOS Integer Overflow or Wraparound (CVE-2020-28895)

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption. SCALANCE X-200, X-200IRT, and X-300...

PT-2023-9791 · Visteon · Visteon Infotainment

Name of the Vulnerable Software and Affected Versions: Visteon Infotainment affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Visteon Infotainment systems. An attacker must first obtain the ability to execute...

Security Bulletin: NVIDIA DGX-1 - April 2023

NVIDIA has released a security update for NVIDIA DGX-1 firmware. This update addresses an issue that may lead to arbitrary code execution, denial of service, escalation of privileges, information disclosure, data tampering, and SecureBoot bypass. To protect your system, download and install this...

Security Bulletin: NVIDIA ConnectX - April 2023

NVIDIA has released a security update for NVIDIA ConnectX® firmware. This update addresses issues that may lead to denial of service. To protect your system, download and install this firmware update from the NVIDIA Networking Support page. Go to NVIDIA Product Security. Details This section...

Mitsubishi Electric GOC35 Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric India Equipment: GC-ENET-COM Vulnerability: Signal Handler Race Condition 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to a communication error and may...

Security Bulletin: IBM Integrated Management Module (IMM) is affected by vulnerability in OpenSLP (CVE-2017-17833)

Summary IBM Integrated Management Module IMM has addressed the following vulnerability in OpenSLP. Vulnerability Details Summary IBM Integrated Management Module IMM has addressed the following vulnerability in OpenSLP. Vulnerability Details CVEID: CVE-2017-17833 Description: OpenSLP, as used in...

Security Bulletin: Vulnerability in libxml2 affects IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in libxml2. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in libxml2. Vulnerability Details CVEID: CVE-2017-8872 Description:...

Security Bulletin: Vulnerabilities in php53 affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2017-9227, CVE-2017-9226, CVE-2017-9224)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in php53. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in php53. Vulnerability Details CVEID: CVE-2017-9227 Description:...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM BladeCenter Switches (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details Summary The RC4 "Bar Mitzvah" Attack for SSL/TLS affects IBM BladeCenter Switches. Vulnerability Details CVE-ID: CVE-2015-2808 Description: The RC4 algorithm, as used in the TLS protocol and S...

PT-2023-6482 · Canon · Canon Office / Small Office Multifunction Printers/Laser Printers +1

Name of the Vulnerable Software and Affected Versions: Canon imageCLASS series versions prior to firmware Ver.11.04 Canon Office / Small Office Multifunction Printers and Laser Printers versions prior to firmware Ver.11.04 Description: The issue is related to a buffer overflow in the IPP sides...

Security Bulletin: Vulnerabilities in OpenSSL affect QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for IBM BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter

Summary The following vulnerabilities in OpenSSL have been addressed by QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module for IBM BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter. Vulnerability Details CVEID: CVE-2017-3738 DESCRIPTION: OpenSSL could allow a...

CVE-2023-27389

Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply a specially crafted Firmware update file, alter the information, cause a denial-of-service DoS condition, and/or execute arbitrary code...

CVE-2023-27389

The CVE-2023-27389 entry describes an Inadequate Encryption Strength vulnerability in CONPROSYS IoT Gateway products. A remote authenticated attacker with administrative privileges can use a crafted firmware update to alter information, trigger a denial-of-service, and/or execute arbitrary code. ...