PT-2019-3517

Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...

CVE-2019-10161

It was discovered that libvirtd would permit read-only clients to use the virDomainSaveImageGetXMLDesc API, specifying an arbitrary path which would be accessed with the permissions of the libvirtd process. An attacker with access to the libvirtd socket could use this to probe the existence of...

PT-2019-4205

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description The issue is related to an uncontrolled resource consumption in the Linux kernel, specifically in the rtl usb probe function and a memory leak in the crypto report function. This can be exploit...

PT-2019-4098 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to a memory leak in the cx23888 ir probe function, which can lead to uncontrolled resource consumption. This can be exploited by a remote attacker to cause a denial of...

PT-2019-4207

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.11 Description A memory leak in the spi gpio probe function in drivers/spi/spi-gpio.c allows attackers to cause a denial of service by triggering devm add action or reset failures. This issue is disputed by...

PT-2019-4229 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.3.11 Description: The issue is related to a memory leak in the fsl lpspi probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be triggered by failures in p...

PT-2019-4204 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.11 Description: The issue is related to two memory leaks in the rtl usb probe function in the Linux kernel, which can cause a denial of service due to memory consumption. This can be exploited by attackers t...

The vulnerability of the usb_audio_probe function in the Linux operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the usbaudioprobe function in the Linux kernel’s sound/usb/card.c file is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure due to the use of a malicious USB Sound device...

PT-2019-4416 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.3.8 Description: A memory leak in the ca8210 probe function allows attackers to cause a denial of service by triggering ca8210 get platform data failures. This issue is related to uncontrolled resource...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

Code injection

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

CVE-2019-14238

On STMicroelectronics STM32F7 devices, the Proprietary Code Read Out Protection (PCROP) can be defeated by a debug probe through the ITCM bus, exposing the software IP protection mechanism. Affected component: PCROP in STM32F7. Root cause: PCROP can be bypassed via a debug interface to the ITCM p...

CVE-2019-14238: Improper Authentication

On STMicroelectronics STM32F7 devices, Proprietary Code Read Out Protection PCROP a software IP protection method can be defeated with a debug probe via the Instruction Tightly Coupled Memory ITCM bus...

PT-2019-13553

Name of the Vulnerable Software and Affected Versions STMicroelectronics STM32F7 devices affected versions not specified Description A security issue affects the Proprietary Code Read Out Protection PCROP on STMicroelectronics STM32F7 devices. This issue allows the PCROP, a software IP protection...

SKA - Simple Karma Attack

SKA allows you to implement a very simple and fast karma attack. You can sniff probe requests to choice the fake AP name or, if you want, you could insert manually the name of the AP evil twin attack. When the target has connected to your WLAN you could active the HTTP redirection and perform a...

PT-2019-12877

Name of the Vulnerable Software and Affected Versions Espressif ESP8266 NONOS SDK versions 2.2.0 through 3.1.0 Description The issue is related to the client 802.11 mac implementation, which does not correctly validate the RSN AuthKey suite list count in certain frames. This allows attackers with...

Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)

Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...

Linux kernel null pointer dereference vulnerability (CNVD-2019-32359)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A null pointer dereference vulnerability exists in the flexcopusbprobe function in the...

DEBIAN-CVE-2019-15291

An issue was discovered in the Linux kernel through 5.2.9. There is a NULL pointer dereference caused by a malicious USB device in the flexcopusbprobe function in the drivers/media/usb/b2c2/flexcop-usb.c driver...