971 matches found
PT-2021-22083
Name of the Vulnerable Software and Affected Versions Winner aka ToneWinner desktop speakers through 2021-08-09 Description The issue allows remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, also known as a "Glowworm" attack. Th...
CVE-2021-38365: Undefined Security Weakness
Winner aka ToneWinner desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack...
PT-2021-21318
Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set ledonoff function within the adm.cgi binary. This function is accessible with a page parameter value of ledonoff. The led cmd parameter's...
Shifting the focus from reactive to proactive, with human-led secure coding
The same 10 software vulnerabilities have caused more security breaches in the last 20+ years than any others. And yet, many businesses still opt for post-breach, post-event remediation, muddling through the human and business ramifications of it all. But now, a new research study points to a new...
The Evolution of DevOps in 2021
DevOps has long been a key tool in helping organizations reliably and rapidly deliver systems into production. While in the past, IT and software development teams suffered from lengthy processes and struggled to resolve incompatible priorities, now DevOps allows for easier collaboration, as well...
Buffer overflow
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a...
CVE-2021-22659
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a...
CVE-2021-22659
Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a...
PT-2021-15157 · Rockwell Automation · Micrologix 1400
Name of the Vulnerable Software and Affected Versions: Rockwell Automation MicroLogix 1400 versions 21.6 and below Description: The issue allows a remote unauthenticated attacker to send a specially crafted Modbus packet, enabling the retrieval or modification of random values in the register...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.500.9.3.el7 - net/rds: Reject error code change Ka-Cheong Poon Orabug: 32577425 - PCI: hotplug: Add module parameter to allow user control of LEDs James Puthukattukaran Orabug: 32577399 - net/rds: increase 1MB MR pool size for RDS Manjunath Patil Orabug: 32577394...
csas.china-led.net Cross Site Scripting vulnerability OBB-1454515
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
led-sport-light.com Cross Site Scripting vulnerability OBB-1438066
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
the-led-lamp.com Cross Site Scripting vulnerability OBB-1406771
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
led-downlight.com Cross Site Scripting vulnerability OBB-1406716
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the Intel LED Manager for NUC software, related to authentication deficiencies, allows a hacker to trigger a service failure.
The vulnerability of the Intel LED Manager for NUC software-related lighting control systems is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system’s operation...
CVE-2020-17382
The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow 0x80102040, 0x80102044, 0x80102050,and 0x80102054. Recent assessments: bwatters-r7 at September 09, 2020 6:09pm UTC reported: This is a vulnerability in the MSI AmbientLink Version 1.0.0.8. The vulnerability allows a regular user...
CVE-2020-8685
Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...
CVE-2020-8685
Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...