CVE-2023-34317

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to...

CVE-2023-34317

CVE-2023-34317 is an Open Automation Software OAS Platform vulnerability (v18.00.0072) in the OAS Engine User Creation flow caused by improper input validation. Talos reports that when adding a user, the engine does not filter the username, allowing a wide range of characters to be stored in the ...

Security Bulletin: Vulnerability found in dom4j-1.6.1.jar which is shipped with IBM® Intelligent Operations Center(CVE-2018-1000632)

Summary Vulnerability have been identified in dom4j-1.6.1.jar which is shipped with IBM® Intelligent Operations Center. Information about this vulnerability affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details...

PT-2023-22907 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Sep-2023 Release 1 Description: The issue is related to an improper input validation vulnerability in the FileProviderStatusReceiver component of the Samsung Keyboard. This vulnerability allows local...

PT-2023-22911 · Samsung · Knox Ai

Name of the Vulnerable Software and Affected Versions: Knox AI versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by attackers to gain unauthorized access to...

CVE-2023-20820

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189...

Out-of-bounds

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360...

CVE-2023-32815

The CVE-2023-32815 issue affects the gnss service and is caused by improper input validation that can trigger an out-of-bounds read, potentially enabling local information disclosure with System execution privileges required. No user interaction is needed for exploitation. A patch is referenced (...

CVE-2023-32812

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365...

CVE-2023-32812

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08017365; Issue ID: ALPS08017365...

CVE-2023-32811

In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07929848; Issue ID: ALPS07929848...

CVE-2023-32807

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360...

CVE-2023-32806

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589...

CVE-2022-47353

In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from improper input validation of the wlan service, possibly due to command injection...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from an improper input validation issue with the gnss service, which may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to an improper input validation issue in the wlan driver, which may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from an improper input validation issue in the wlan service, which may result in out-of-bounds reads...

PT-2023-24044 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...

PT-2023-24046 · Unknown · Gnss Service

Name of the Vulnerable Software and Affected Versions: gnss service affected versions not specified Description: The issue is related to a possible out of bounds read in the gnss service due to improper input validation. This could lead to local information disclosure with System execution...