CVE-2023-40142

In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40142

CVE-2023-40142 is documented in multiple sources as a local elevation-of-privilege affecting Google Pixel components, stemming from a logic error in the code that bypasses carrier restrictions on the device. The Android Pixel bulletins and Red Hat/NVD records describe the issue as enabling local ...

CVE-2023-40142

In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

Design/Logic Flaw

Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2...

Design/Logic Flaw

Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality...

PT-2023-27294 · Google · Android

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a logic error in the code that allows bypassing carrier restrictions. This could lead to local escalation of privilege without needing additional execution privileges...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from a logic error in the TBD component code, with a possible way to bypass carrier restrictions. This could result in a local privilege escalation without the need for additional...

Design/Logic Flaw

User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users...

Design/Logic Flaw

In FNET 4.6.3, TCP ISNs are improperly random...

Design/Logic Flaw

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to inject HTML tags in FortiMail's calendar via input fields...

Design/Logic Flaw

In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random...

Design/Logic Flaw

In Contiki 4.5, TCP ISNs are improperly random...

kernel: xfrm_expand_policies() in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice

A flaw was found in the Linux kernel’s IP framework for transforming packets XFRM subsystem. An error while resolving policies in xfrmbundlelookup causes the refcount to drop twice, leading to a possible crash and a denial of service...

Design/Logic Flaw

When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTPREQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached...

Design/Logic Flaw

The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database DB variables. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...