CVE-2023-5081

CVE-2023-5081 describes an information-disclosure vulnerability in Lenovo Tab M8 HD where a local application could obtain a non-resettable device identifier. The NVD/NIST entry provides a CVSSv3.1 base score of 3.3 (Low) with LOCAL attack vector, minimal privileges, no user interaction, and conf...

WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS)

Software HD Quiz Type Plugin Vulnerable versions = 1.8.11 Fixed in 1.8.12 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-22161 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b20e08ed859a Credits MyungJu Kim Required privilege Administrator...

Ubuntu: Security Advisory (USN-6567-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-1556 · Lenovo · Lenovo Tab M8 Hd

Name of the Vulnerable Software and Affected Versions: Lenovo Tab M8 HD affected versions not specified Description: An information disclosure issue was reported, allowing a local application to gather a non-resettable device identifier. This could potentially enable an attacker to disclose...

USN-6567-1: QEMU vulnerabilities

Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attacker could possibly use this issue to cause QEMU to crash, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2020-14394 It w...

USN-6567-1 qemu vulnerabilities

Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attacker could possibly use this issue to cause QEMU to crash, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2020-14394 It w...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : QEMU vulnerabilities (USN-6567-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6567-1 advisory. Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attack...

CVE-2023-6540

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information...

CVE-2023-6540

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information...

CVE-2023-6540

The CVE-2023-6540 entry applies to Lenovo Browser Mobile and Lenovo Browser HD Apps for Android, where a payload can trigger disclosure of sensitive information. Connected sources describe a code-injection style vulnerability in Lenovo Browser Mobile (and HD Apps) with no publicly documented expl...

PT-2024-15000 · Lenovo · Lenovo Browser Mobile +1

Name of the Vulnerable Software and Affected Versions: Lenovo Browser Mobile and Lenovo Browser HD Apps for Android affected versions not specified Description: A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a...

hd-treppenlifte.de Improper Access Control vulnerability OBB-3818811

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hd-trailers.net Cross Site Scripting vulnerability OBB-3813236

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

About the security content of tvOS 17.2

About the security content of tvOS 17.2 This document describes the security content of tvOS 17.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

TitanNit Web Control 2.01 / Atemio 7600 Root Remote Code Execution

Summary The Atemio AM 520 HD Full HD satellite receiver enables the reception of digital satellite programs in overwhelming image quality in both SD and HD ranges. In addition to numerous connections, the small all-rounder offers a variety of plugins that can be easily installed thanks to the lar...

CVE-2023-4804

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

CVE-2023-4804

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

Code injection

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

CVE-2023-4804 Quantum HD Unity

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed...

CVE-2023-4804

CVE-2023-4804 affects Johnson Controls Quantum HD Unity family. The root cause is an active debug code/debug features accidentally exposed, allowing an unauthorized user to access debugging functionality. Affected products and versions include: Quantum HD Unity Compressor panels (Q5: all versions...