3159 matches found
CVE-2021-0450
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2021-0450
CVE-2021-0450 affects the Titan M component in Google's Pixel devices. The Titan M firmware disclosure arises from uninitialized data leading to possible stack memory disclosure, enabling local information disclosure with system privileges without user interaction. Reported across multiple source...
CVE-2021-0449
CVE-2021-0449 : In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data, leading to local information disclosure with System execution privileges required. The vulnerability affects the Titan M component as listed in Android kernel contexts; exploita...
CVE-2021-0449
In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
PT-2021-7788 · Siemens · Scalance X-200 +8
Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 versions 4.3 through 6.3 SCALANCE M-800 versions 4.3 through 6.3 SCALANCE S615 versions 4.3 through 6.3 SCALANCE SC-600 Family versions 2.0 through 2.1.2 SCALANCE XB-200 versions prior to 4.1 SCALANCE XC-200 versions prior to...
Siemens RUGGEDCOM 安全漏洞
SCALANCE SC-600 devices SC622-2C, SC632-2C, SC636-2C, SC642-2C, SC646-2C are used to protect trusted industrial networks from untrusted networks.SCALANCE M-800/S615 industrial routers are used for secure remote access to plants via mobilenetworks e.g. GPRS or UMTS for secure remote access to...
PT-2021-4942
Name of the Vulnerable Software and Affected Versions Arm Trusted Firmware-M versions M through 1.2 Description The issue is related to an out-of-bounds write in the implementation of the NSPE Non-secure Processing Environment mode in Arm Trusted Firmware-M. This can cause a system halt, overwrit...
RACOM M!DGE OS Command Injection Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. An OS command injection vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerabili...
RACOM M!DGE Information Disclosure Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. An information disclosure vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit the...
RACOM M!DGE Cross-Site Scripting Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site scripting vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerabilit...
RACOM M!DGE Cross-Site Request Forgery Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site request forgery vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. No detailed vulnerability details a...
RACOM M!DGE Elevation of Privilege Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. An elevation of privilege vulnerability exists in RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerability...
RACOM M!DGE cross-site scripting vulnerability (CNVD-2021-12627)
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site scripting vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. The vulnerability can be exploited by an...
RACOM M!DGE Directory Traversal Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A directory traversal vulnerability exists in RACOM M!DGE firmware version 4.4.40.105. An attacker could exploit this vulnerability t...
RACOM M!DGE cross-site scripting vulnerability (CNVD-2021-12628)
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site scripting vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerabilit...
RACOM M!DGE cross-site scripting vulnerability (CNVD-2021-12629)
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site scripting vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerabilit...
The vulnerability of the Get16m function in the jhead program for working with EXIF files allows a hacker to cause a service failure.
The vulnerability of the Get16m function in the jhead program for working with EXIF files is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted file...
CVE-2021-22299
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...
CVE-2021-22299
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne...
CVE-2021-22299
CVE-2021-22299 describes a local privilege escalation in certain Huawei products. The vulnerability affects multiple ManageOne, NFV_FusionSphere, SMC2.0, and iMaster MAE-M release lines (for example ManageOne versions 6.5.0 and 8.0.x series, NFV_FusionSphere 6.5.x and 8.0.x, SMC2.0 V600R019C00/C1...