EUVD-2023-29147

Malicious code in bioql PyPI...

CVE-2024-50381

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a reque...

CVE-2024-50381: Missing Authentication for Critical Function

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a reque...

PT-2024-8933

Name of the Vulnerable Software and Affected Versions: Snap One OVRC cloud affected versions not specified Description: A vulnerability exists in the Snap One OVRC cloud, allowing an attacker to impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to...

PT-2024-5744

Name of the Vulnerable Software and Affected Versions Azure IoT Hub Device Client SDK affected versions not specified Description The issue is related to a memory reuse error in the Azure IoT Hub Device Client SDK toolkit and libraries. Exploitation of this issue may allow an attacker to execute...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...

CVE-2024-26933

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs attribute The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device. This can cause problems if...

Design/Logic Flaw

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device...

CVE-2023-25183: Hidden Functionality

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device...

Snap One OvrC Pro 安全漏洞

Snap One OvrC is a free cloud-based remote management and monitoring platform from Snap One USA. A security vulnerability exists in Snap One OvrC Pro prior to version 7.3, which stems from a vulnerability that could allow a user to execute arbitrary commands on a hub device when logged in as a...

CVE-2018-8531: Out-of-bounds Write

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...

PT-2018-2124

Name of the Vulnerable Software and Affected Versions Azure IoT Hub Device Client SDK affected versions not specified Azure IoT Edge affected versions not specified Description A remote code execution issue exists due to the way the Azure IoT Hub Device Client SDK accesses objects in memory. This...

UBUNTU-CVE-2015-8816

The hubactivate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service invalid memory access and system crash or possibly have unspecified other impact ...

CVE-2015-8816

The hubactivate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-interface data structure, which allows physically proximate attackers to cause a denial of service invalid memory access and system crash or possibly have unspecified other impact ...