PT-2023-29451 · Mr-Gm3 +1 · Mr-Gm3 +1

Name of the Vulnerable Software and Affected Versions: MR-GM2 firmware versions 3.00.03 and earlier MR-GM3 -D/-K/-S/-DK/-DKS/-M/-W firmware versions 1.03.45 and earlier Description: The issue allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication when the...

Micro Research MR-GM Series Trust Management Issues Vulnerabilities

The Micro Research MR-GM Series is a line of USB-based mobile data communication cards from Micro Research. A security vulnerability exists in Micro Research MR-GM Series version 3.00.03 and earlier, which stems from a Use of Default Credentials vulnerability that could allow an unauthenticated...

gm-engineering.de Cross Site Scripting vulnerability OBB-3721681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...

CVE-2023-39076

Injecting random data into the USB memory area on a General Motors GM Chevrolet Equinox 2021 Software. 2021.03.26 build version vehicle causes a Denial of Service DoS in the in-car infotainment system...

dukesgmhealth.org Cross Site Scripting vulnerability OBB-3283453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Design/Logic Flaw

The MyLink infotainment system build 2021.3.26 in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service temporary failure of Media Player functionality via a crafted MP3 file...

gm-adikarya.com Cross Site Scripting vulnerability OBB-3142178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

addons-linter (>=1.3.6 <=1.4.0), imagemin-gm (=2.0.1) +1 more potentially affected by CVE-2022-24441 +1 more via snyk (>=1.103.2 <=1.105.0)

snyk NPM version =1.103.2, =1.3.6, =1.4.0 - imagemin-gm =2.0.1 - web-ext =2.9.2 Source cves: CVE-2022-24441, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3111871...

addons-linter (>=1.3.6 <=1.4.0), imagemin-gm (=2.0.1) +1 more potentially affected by CVE-2022-22984 +1 more via snyk (>=1.103.2 <=1.105.0)

snyk NPM version =1.103.2, =1.3.6, =1.4.0 - imagemin-gm =2.0.1 - web-ext =2.9.2 Source cves: CVE-2022-22984, CVE-2022-40764 Source advisory: SNYK:JS-SNYK-3038622...

gmperformancemotor.com Improper Access Control vulnerability OBB-2839433

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gmperformancemotor.com Improper Access Control vulnerability OBB-2355536

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

gmprimarycarecareers.org.uk Improper Access Control vulnerability OBB-2226042

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

AT&T, GM Make 5G Connected Car Deal

The collaboration aims to enhance various features on GM’s connected cars, with the hope of having millions of vehicles with 5G connectivity on the road by 2024...

Weak Password Vulnerability in XR20-GM of Hangzhou Dipu Technology Co.

XR20-GM is a new-generation router product based on the multi-core processor architecture of DIPTECH, which realizes the seamless integration of routing and switching with security and application delivery. The XR20-GM has a weak password vulnerability that can be exploited by attackers to log in...

gm-dahmen.de Cross Site Scripting vulnerability OBB-1323145

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

GHSA-PJH3-JV7W-9JPR Command Injection in gm

Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare, which fails to sanitize input correctly before calling the graphics magic binary. Recommendation Update to version 1.21.1 or later...

Command Injection in gm

Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare, which fails to sanitize input correctly before calling the graphics magic binary. Recommendation Update to version 1.21.1 or later...

Denial Of Service (DoS)

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...