CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...

CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...

CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...

CVE-2024-23170

An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing side channel in RSA private operations. This side channel could be sufficient for a local attacker to recover the plaintext. It requires the attacker to send a large number of messages for decryption, a...

Command injection

OS command injection vulnerability in command processing or system call componentsROS2 Robot Operating System 2 Foxy Fitzroy, with ROSVERSION=2 and ROSPYTHONVERSION=3 allows attackers to run arbitrary commands...

PT-2024-14064 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 Foxy Fitzroy Description: An issue was discovered in shell command execution in ROS2, allowing an attacker to run arbitrary commands and cause other impacts. The issue is related to the ROS VERSION=2 and ROS PYTH...

Number withdrawn

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

Number withdrawn

Robot Operating System is a meta-operating system for robots. This CVE number has been withdrawn...

CVE-2023-51197

An issue in ROS2 Foxy Fitzroy allows command injection through shell command execution when ROS_VERSION=2 and ROS_PYTHON_VERSION=3. Root cause: vulnerable shell command pathway in ROS2. Impact: arbitrary commands and potential further effects as described. No exploit details provided in the docum...

PT-2024-14070 · Unknown · Ros2 Foxy Fitzroy

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy versions 2 Description: Insecure deserialization in ROS2 allows attackers to execute arbitrary code via a crafted input. The issue affects ROS2 Foxy Fitzroy with ROS VERSION=2 and ROS PYTHON VERSION=3. Recommendations: For...

PT-2024-14069 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 versions Foxy Fitzroy Description: The issue is an OS command injection vulnerability in command processing or system call components. This allows attackers to run arbitrary commands. The ROS VERSION is 2 and ROS...

Number withdrawn

ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...

PT-2024-14068 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Robot Operating System 2 Foxy Fitzroy versions 2 Description: The issue allows attackers to access sensitive information via a man-in-the-middle attack due to cleartext transmission. This can be exploited to gain unauthorized access to...

Number withdrawn

ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...

Number withdrawn

ROS2 Foxy Fitzroy is an application of the ROS2 organization. This CVE number has been withdrawn...

PT-2024-14066 · Unknown · Ros2 Foxy Fitzroy

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy version 2 Description: A buffer overflow issue exists due to improper handling of arrays or strings, allowing attackers to run arbitrary code or cause a denial of service. Recommendations: For ROS2 Foxy Fitzroy version 2, at...

PT-2024-14071 · Unknown · Ros2 Foxy Fitzroy

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy version 2 Description: An Arbitrary File Upload issue allows attackers to run arbitrary code and cause other impacts via the upload of a crafted file. Recommendations: For ROS2 Foxy Fitzroy version 2, consider restricting fi...

The vulnerability of the web server of the FANUC Robotics Virtual Robot Controller software allows a hacker to execute arbitrary code.

The vulnerability of the web server of the FANUC Robotics Virtual Robot Controller emulation software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the web-server of the FANUC Robotics Virtual Robot Controller software allows a hacker to circumvent existing restrictions on the name of the catalog.

The vulnerability of the FANUC Robotics Virtual Robot Controller software’s web server is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a perpetrator to circumvent existing restrictions on the catalog path by sending a special...

robot-italy.com Improper Access Control vulnerability OBB-3809285

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...