1370 matches found
GSD-2022-1005074 powerpc/pseries/mobility: set NMI watchdog factor during an LPM
powerpc/pseries/mobility: set NMI watchdog factor during an LPM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...
Siemens Mobility CoreShield OWG Software
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Mobility Equipment: CoreShield One-Way Gateway OWG Software Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to leverage the default...
arnabmobility.com Cross Site Scripting vulnerability OBB-2858331
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-33936
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
CVE-2022-33936
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
Code injection
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
CVE-2022-33936
CVE-2022-33936 affects Cloud Mobility for Dell EMC Storage, 1.3.0.XXX, with an RCE vulnerability that could allow a non-privileged user to obtain a root shell. The connected documents indicate a path-traversal/remote code execution issue and cite a Dell security update as remediation. The CVE rec...
CVE-2022-33936
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
Cloud Mobility for Dell EMC Storage 安全漏洞
Cloud Mobility for Dell EMC Storage is a feature from Dell USA that supports the transfer, storage, and access of volume snapshot copies between compatible local Dell EMC Storage devices and public cloud object storage. A security vulnerability exists in Cloud Mobility for Dell EMC Storage 1.3.0...
PT-2022-21924
Name of the Vulnerable Software and Affected Versions Cloud Mobility for Dell EMC Storage version 1.3.0.XXX Description The issue allows a non-privileged user to potentially exploit a remote code execution vulnerability, leading to achieving a root shell. This is considered a critical issue...
CVE-2022-33936: Undefined Security Weakness
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
CVE-2022-33936
Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...
dmhmobility.de Cross Site Scripting vulnerability OBB-2689480
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Open5Gs 缓冲区错误漏洞
Open5Gs is a C open source implementation of 5G Core and Epc, the core network for the Lte/Nr network.A denial of service vulnerability exists in Open5Gs version 2.1.4 of AMF, which stems from a network system or product that does not properly validate data boundaries when performing operations o...
CISA’s Zero Trust Guidance for Enterprise Mobility Available for Public Comment
CISA has released a draft version of Applying Zero Trust Principles to Enterprise Mobility for public comment. The paper guides federal agencies as they evolve and operationalize cybersecurity programs and capabilities, including cybersecurity for mobility. The public comment period will close...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in EMM in Google Android 11, which stems from a lack of data encryption in the modem EMM that could lead to information disclosure...
Improving security for mobile devices: CISA issues guides
The Cybersecurity and Infrastructure Security Agency CISA has released two actionable Capacity Enhancement Guides CEGs to help users and organizations improve mobile device cybersecurity. Consumers One of the guides is intended for consumers. There are an estimated 294 million smart phone users i...
CVE-2021-40124: Incorrect Privilege Assignment
A vulnerability in the Network Access Manager NAM module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user...
PT-2021-5038
Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client affected versions not specified Description The issue is related to incorrect privilege assignment in the Network Access Manager module, which could allow an authenticated, local attacker to escalate...
