926 matches found
CVE-2023-36622
The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated administrators to inject arbitrary OS commands via the timezone parameter...
Arm Mali GPU Kernel Driver < r43p0 Information Exposure (CVE-2023-26083)
The version of the Mali GPU Kernel Driver installed on the remote system is prior to r43p0 running on Migard, Bifrost, Valhall or 5th Gen architecture. It is, therefore, affected by an information disclosure vulnerability. A non-privileged user can make valid GPU processing operations that expose...
CVE-2023-0954
A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...
Design/Logic Flaw
A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack...
CVE-2023-0954
The CVE-2023-0954 vulnerability affects Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras (Dome up to Illustra.SS016.05.09.04.0006; PTZ up to Illustra.SS010.05.09.04.0022). A debug feature is improperly enabled on some devices, enabling credential compromise after a long period of s...
CISA Releases Two Industrial Control Systems Advisories
CISA released two Industrial Control Systems ICS advisories on June 8, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-159-01 Atlas Copco Power Focus 6000 ICSA-23-159-02 Sensormatic Electronics Illustra Pro...
Sensormatic Electronics Illustra Pro Gen 4
1. EXECUTIVE SUMMARY CVSS v3 8.3 ATTENTION: Exploitable via adjacent network Vendor: Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Equipment: Illustra Pro Gen 4 Vulnerability: Active Debug Code 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
CVE-2023-28469
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r29p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0...
CVE-2023-28147
An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and...
PT-2023-21739 · Arm · Arm Mali Gpu Kernel Driver
Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Valhall r29p0 through r42p0 Arm Mali GPU Kernel Driver versions Arm's GPU Architecture Gen5 r41p0 through r42p0 Description: An issue was discovered in the Arm Mali GPU Kernel Driver, where a non-privileged...
kernel: crypto: qat - fix out-of-bounds read
An out-of-bounds read vulnerability was found in the Linux kernel's Intel QAT QuickAssist Technology crypto driver. When preparing an AES-CTR encryption request on QAT GEN4 devices, the driver rounds up the key size by 16 bytes before copying. If this rounding occurs before the memcpy operation,...
Ubiquiti UniFi Cloud Key 跨站请求伪造漏洞
Ubiquiti UniFi Cloud Key is a secret key device that supports management of UniFi networks from Ubiquiti, Inc. A security vulnerability exists in the Ubiquiti UniFi Cloud Key UniFi OS 2.5 and prior versions, which originated from a vulnerability that allows malicious actors to access certain...
CVE-2023-1384
The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3...
CVE-2023-1383
An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr service allowed an attacker to register services that are only locally accessible. This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with Fire...
CVE-2023-1384
The setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter allowing for arbitrary javascript code to be run This issue affects: Amazon Fire TV Stick 3rd gen versions prior to 6.2.9.5. Insignia TV with FireOS versions prior to 7.6.3.3...
Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver
Exploit for CVE-2022-38181 for FireTV 2nd gen Cube This is a...
HPESBHF04456 rev.1 - HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4), Remote Cross-Site Scripting
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 4 iLO 4 - Prior to v2.82 HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v2.78 HPE Integrated Lights-Out 6 iLO 6 - Prior to v1.2...
Intel® Serial IO Driver for Intel® NUC 11 Gen Advisory
Summary: A potential security vulnerability in the Intel® Serial IO driver for Intel® NUC 11 Gen may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33118 Description: Improper access control in t...
Intel Processors 安全漏洞
Libreswan is an IPsec implementation similar to Openswan, which is primarily used to ensure security, integrity issues in data transmission. A security vulnerability exists in Intel Processors firmware that stems from incorrect access control on the device, which can be exploited by an attacker t...
SUSE CVE-2019-11690
genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...