CVE-2023-42534

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...

CVE-2023-42533

CVE-2023-42533 affects Samsung Mobile devices prior to SMR Nov-2023 Release 1. The root cause is improper input validation on the USB Gadget Interface, allowing a physical attacker to execute arbitrary code in the kernel. Impact is kernel compromise with high confidentiality, integrity, and avail...

CVE-2023-42528

CVE-2023-42528 affects Samsung devices via the libsec-ril component, specifically the ProcessNvBuffering path. The root cause is improper input validation, enabling a local attacker to execute arbitrary code. The vulnerability is tied to Samsung’s SMR November 2023 Release 1 remediation; affected...

CVE-2023-42528

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-42527

CVE-2023-42527 affects libsec-ril, specifically ProcessWriteFile, with improper input validation prior to Samsung SMR Nov-2023 Release 1. A local attacker could expose sensitive information by exploiting this vulnerability. The issue impacts Samsung mobile devices using libsec-ril and is fixed by...

CVE-2023-21671 Improper Input Validation in Core

Memory Corruption in Core during syscall for Sectools Fuse comparison feature...

PT-2023-28404 · Libsaped · Libsaped

Name of the Vulnerable Software and Affected Versions: libsaped versions prior to SMR Nov-2023 Release 1 Description: The issue is related to improper input validation in the saped rec silence function within libsaped, allowing local attackers to cause out-of-bounds read and write. Recommendation...

Fedora 39 : linux-firmware (2023-dd3ebcea25)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dd3ebcea25 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

An Improper Input Validation vulnerability for the registered case credentials (CVE-2023-5649)

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

RHEL 9 : pcs (RHSA-2023:6316)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6316 advisory. The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: decode-uri-component: improper...

Apache Traffic Server 8.x < 8.1.3 / 9.x < 9.1.1 Multiple Vulnerabilities

According to its self reported version, the remote Apache Traffic Server install is affected by multiple vulnerabilities. - Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite...

Fedora 39 : pcs (2023-e4cb7a5bda)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e4cb7a5bda advisory. Automatic update for pcs-0.11.6-1.fc39. Changelog Wed Jun 21 2023 Michal Pospisil - 0.11.6-1 - Rebased to the latest upstream sources see CHANGELOG.md -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2023:4375-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4375-1 advisory. - Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being...

CVE-2023-32825

The CVE-2023-32825 entry documents an out-of-bounds read in the bluethooth service due to improper input validation, enabling local information disclosure without user interaction. The vulnerability affects the bluethooth component described in the MediaTek context and is associated with patch AL...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from an improper input validation issue in the bluethooth service module, which may result in out-of-bounds reads...

Improper Input Validation

trafficserver is vulnerable to Improper Input Validation. The vulnerability occurs in the Apache traffic server with malformed HTTP/2 frames resulting in a Denial of Service...

Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2023-415)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-415 advisory. Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1...

CVE-2023-41355 Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted package to modify the network routing table, resulting in a denial of service or sensitive...

Zoom Client for Meetings < 5.15.0 Vulnerability (ZSB-23018)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23018 advisory. - Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user t...

SUSE SLES12 Security Update : tomcat (SUSE-SU-2023:4337-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4337-1 advisory. - Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through...