EUVD-2020-20034

Malware in sbrugna...

Malicious code in yam-mmi-project (npm)

The package yam-mmi-project was found to contain malicious code...

MAL-2025-40166 Malicious code in yam-mmi-project (npm)

The package yam-mmi-project was found to contain malicious code...

CVE-2024-27453

In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface MMI...

CVE-2024-27453

In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface MMI...

CVE-2024-27453

Extreme XOS versions 22.6.1.4 and earlier are susceptible to a privilege escalation vulnerability. A read-only user can escalate their privileges to root by sending a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI) . As a temporary workaround, it is recomm...

CVE-2023-23771

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2023-23770

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

Hardcoded credentials

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2023-23770

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interface MMI, allowing for service technicians to diagnose and configure the device, accepts a hard-coded backdoor password that cannot be changed or disabled...

CVE-2020-27524

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

Format string

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

CVE-2020-27524

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

CVE-2020-27524

The CVE-2020-27524 entry concerns the Bluetooth stack in the Audi A7 MMI 2014 family, specifically the MMI Multiplayer variant labeled N+R_CN_AU_P0395. The underlying issue is a mishandling of %x and %s format string specifiers in a device name, which can lead to memory content leaks and may caus...

CVE-2020-27524: Use of Externally-Controlled Format String

On Audi A7 MMI 2014 vehicles, the Bluetooth stack in Audi A7 MMI Multiplayer with version N+RCNAUP0395 mishandles %x and %s format string specifiers in a device name. This may lead to memory content leaks and potentially crash the services...

PT-2020-16698

Name of the Vulnerable Software and Affected Versions Audi A7 MMI Multiplayer version N+R CN AU P0395 Description The Bluetooth stack in Audi A7 MMI Multiplayer mishandles %x and %s format string specifiers in a device name, potentially leading to memory content leaks and service crashes...

SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2019:2650-1)

This update for binutils fixes the following issues : binutils was updated to current 2.32 branch @7b468db3 jscECO-368 : Includes the following security fixes : CVE-2018-17358: Fixed invalid memory access in bfdstabsectionfindnearestline in syms.c bsc1109412 CVE-2018-17359: Fixed invalid memory...

mmi-g.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-642776 Description| Value ---|--- Affected Website:| mmi-g.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application...

CVE-2013-6272: Improper Access Control

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application...