CVE-2025-29991

Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/UV Auth Protocol One, even when CTAP PIN/UV Auth Protocol Two was chosen, resulting in a partial signature verification...

CVE-2024-45361

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information...

CVE-2024-45361

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information...

CVE-2024-45361 Mi Connect Service APP protocol flaws lead to leaking sensitive user information

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information...

CVE-2024-45361

The CVE-2024-45361 entry refers to a protocol flaw in Xiaomi Mi Connect Service APP where the validation logic is flawed, enabling leakage of sensitive user information. Affected software: Xiaomi Mi Connect Service APP. Root cause: flawed validation logic. Impact: potential disclosure of sensitiv...

CVE-2024-45361 Mi Connect Service APP protocol flaws lead to leaking sensitive user information

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information...

hostapd 安全漏洞

hostapd is a user space daemon for access points and authentication servers from the individual developer Jouni Malinen. A security vulnerability exists in hostapd version 2.11 and earlier, which stems from the improper handling of specially crafted RADIUS packets, which could lead to RADIUS...

Linux Distros Unpatched Vulnerability : CVE-2023-51589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BlueZ Audio Profile AVRCP parsemediaelement Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to...

Linux Distros Unpatched Vulnerability : CVE-2017-12163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8. A malicious...

The vulnerability of the implementation of the Simple Network Management Protocol (SNMP) in Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the implementation of the Simple Network Management Protocol SNMP for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance lies in the insufficient protection of operational data. Exploiting this vulnerability can allow a malicious...

Siemens SIPROTEC 5 安全漏洞

Siemens SIPROTEC 5 is a multifunction relay from Siemens Germany. A security vulnerability exists in the Siemens SIPROTEC 5 that stems from an affected device not properly validating SNMP GET requests. This could allow an unauthenticated, remote attacker to retrieve sensitive information from the...

Microsoft Lightweight Directory Access Protocol 安全漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A security vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. An attacker exploiting this vulnerability coul...

Azure Linux 3.0 Security Update: hyperv-daemons / kernel (CVE-2023-3338)

The version of hyperv-daemons / kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-3338 advisory. - A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol...

CVE-2022-24673

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The issue results from...

Advisory ROSA-SA-2025-2675

software: libssh2 1.10.0 OS: ROSA-CHROME packageevrstring: libssh2-1.10.0-3 CVE-ID: CVE-2023-48795 BDU-ID: 2023-08853 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process...

USN-7204-1 neomutt vulnerabilities

Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could possibly use this issue to cause NeoMutt to crash, resulting in a denial of service, or the execution of arbitrary code. This issue only affected Ubuntu 18.04 LTS. CVE-2018-14349,...

ROS-20241210-01

A vulnerability in the freerdpimagecopy function of the FreeRDP RDP client is related to reading beyond memory boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to impact the Confidentiality, integrity and availability of protected information FreeRDP RDP clien...

The vulnerability of the Simple Key-Management for Internet Protocol (SKIP) protocol implementation in the PDF viewer macro of the XWiki PDF Viewer (Pro) allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the SKIP protocol implementation in the PDF viewer macro of XWiki PDF Viewer Macro Pro relates to the improper generation of keys. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

lldpd: CDP PDU Packet cdp.c out-of-bounds read

A flaw was found in lldpd due to an out-of-bounds read in cdpdecode at daemon/protocols/cdp.c. By sending a specially crafted CDP PDU packet with specific CDPTLVADDRESSES TLVs, a remote attacker could cause a denial of service...

freeradius: forgery attack

A vulnerability in the RADIUS Remote Authentication Dial-In User Service protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof...