110 matches found
Improper Authentication
bluez is vulnerable to Improper authentication. The vulnerability due to permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. It leads to allow an attacker get access to inject a malicious message...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7702)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Rockwell Automation Stratix Denial of Service AutoKey Malicious Message (CVE-2015-7691)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
Nanoleaf Light strip security vulnerability
Nanoleaf Light strip is a smart LED strip from Nanoleaf. A security vulnerability exists in Nanoleaf Light strip version v3.5.10 that could allow an attacker to send a malicious message and cause a denial of service...
CVE-2023-21339
In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-21339
In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2023-18115 · Minikin · Minikin
Name of the Vulnerable Software and Affected Versions: Minikin affected versions not specified Description: The issue in Minikin allows for a possible way to trigger ANR by showing a malicious message due to resource exhaustion, leading to remote denial of service with no additional execution...
Bosch ctrlX HMI Web Panel Trust Management Issue Vulnerability
Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. The ctrlX HMI Web Panel WR21 version suffers from a security vulnerability that originates from a security flaw in the Android Agent application, which allows an attacker to take control of the network of a malicious MQTT agent...
youmart-tokunaga Security Breach
youmart-tokunaga is a supermarket software from youmart-tokunaga. A security vulnerability exists in youmart-tokunaga version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain a channel access token and send a...
TonTon-Tei_waiting Line Security Vulnerability
TonTon-Teiwaiting Line is an application from TonTon-Teiwaiting, Inc. A security vulnerability exists in TonTon-Teiwaiting Line version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and...
Coffee-jumbo Security Vulnerability
Coffee-jumbo is an application from Coffee-jumbo, Inc. A security vulnerability exists in Coffee-jumbo version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and send a malicious message...
Line Security Breach
Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line v13.6.1, which originates from an information disclosure vulnerability in the applet Tokushimaawayokocho. The vulnerability can be exploited by an attacker to obtain a channel access token and send a...
CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
go-ethereum geth is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory when handling specially crafted p2p messages sent from an attacker node. The fix is included in geth version 1.12.1-stable, i.e,...
CVE-2023-28356
A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one of the processes, consuming 120% CPU and rendering the service unresponsive...
Sengled Dimmer Switch 安全漏洞
The sengled Sengled Dimmer Switch is a smart light switch from sengled. A security vulnerability exists in Sengled Dimmer Switch version V0.0.9. A remote attacker could exploit the vulnerability to send a malicious message to a vulnerable device and cause a crash...
Mozilla: User Interface lockup with messages combining S/MIME and OpenPGP
The Mozilla Foundation Security Advisory describes this flaw as: If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user'...
SUSE CVE-2013-6486
gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2022-46149
Cap'n Proto is a data interchange format and remote procedure call RPC system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out-of-bounds read due to logic error...
Denial Of Service (DoS)
artemis-core-client is vulnerable to denial of service. The vulnerability exists due to the Out of memory OOM condition in the encodeXid function of XidCodecSupport.java as the function does not properly encode the reading data, allowing an attacker to crash the application by providing a...
GO-2022-0256 Panic via maliciously crafted message in github.com/ethereum/go-ethereum
A maliciously crafted snap/1 protocol message can cause a panic...