43 matches found
DEBIAN-CVE-2024-50006
In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in jbd2logwaitcommit. This issue is triggered when an EXT4IOCMIGRATE ioctl is set to require synchronous updates because the file descriptor is...
CVE-2024-6444 Bluetooth: ots: missing buffer length check
No proper validation of the length of user input in olcpindhandler in zephyr/subsys/bluetooth/services/ots/otsclient.c...
PT-2024-21853 · Samsung · Exynos 1330 +8
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930 Description: An issue was discovered in the function slsi rx blockack ind, where there ...
CVE-2024-34463
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity protection...
ind-art.nl Improper Access Control vulnerability OBB-3922229
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
KEMs and Post-Quantum age
Theyre here! NIST selected a first batch of post-quantum cryptographic key exchange and signature algorithms. The report is a nice read that explains a lot of the goals, candidates, selections, and rationales. I recommend Sections 2, 3.3, and 4.1. For key exchange, NIST selected only...
ind-auctions.com Cross Site Scripting vulnerability OBB-1420599
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-3567
A vulnerability in the management REST API of Cisco Industrial Network Director IND could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of service DoS condition on an affected device. The vulnerability is due to insufficient...
CVE-2020-3567 Cisco Industrial Network Director Denial of Service Vulnerability
A vulnerability in the management REST API of Cisco Industrial Network Director IND could allow an authenticated, remote attacker to cause the CPU utilization to increase to 100 percent, resulting in a denial of service DoS condition on an affected device. The vulnerability is due to insufficient...
CVE-2020-3567
CVE-2020-3567 affects Cisco Industrial Network Director (IND) via the management REST API. Affected versions prior to 1.9.0 (per CNVD entry) expose a vulnerability where insufficient validation of REST requests allows an authenticated, remote attacker to trigger high CPU utilization, causing a pe...
@amazingcat/amazing-iohook (>=8.2.3 <=8.3.3), @donmahallem/trapeze-client-desktop (=5.1.1) +15 more potentially affected by CVE-2020-15174 via electron (>=8.0.0-beta.1 <=8.5.0)
electron NPM version =8.0.0-beta.1, =8.2.3, =8.0.0, =0.1.0, =4.0.0-beta.1, =1.0.1, =1.7.0, =1.0.3, =1.0.5, =0.0.1, =1.1.35, =1.1.51 and more Source cves: CVE-2020-15174 Source advisory: OSV:GHSA-2Q4G-W47C-4674...
es-ind-eng.com Cross Site Scripting vulnerability OBB-1260654
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cross site scripting
A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected application. The vulnerability is due to insufficient validati...
CVE-2019-15973
Cisco Industrial Network Director (IND) web-based management interface is affected by a reflected Cross-Site Scripting (XSS) vulnerability (CVE-2019-15973). The issue arises from insufficient validation of user-supplied input, enabling an unauthenticated, remote attacker to lure a user into click...
CVE-2019-1976
Cisco Industrial Network Director (IND) is affected by a vulnerability in the plug‑and‑play services component that allows an unauthenticated, remote attacker to access sensitive information via the web management interface. The root cause is improper access restrictions, enabling an attacker to ...
Code injection
A vulnerability in the Web Services Management Agent WSMA feature of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid X.509 certificate. The vulnerability is due to insufficient X.509...
CVE-2019-1940
Affects Cisco Industrial Network Director (IND) Web Services Management Agent (WSMA). The issue arises from insufficient validation of X.509 certificates during WSMA connection setup, allowing an unauthenticated, remote attacker to read sensitive data via a crafted certificate, enabling man-in-th...
Cross site request forgery (csrf)
A vulnerability in the web-based management interface of Cisco Industrial Network Director IND could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF...
CVE-2019-1881
CVE-2019-1881 affects Cisco Industrial Network Director (IND) web-based management interface. The issue is a CSRF vulnerability caused by insufficient CSRF protections, allowing an unauthenticated, remote attacker to induce a logged-in user to perform arbitrary actions on an affected device by co...
