13214 matches found
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
Buffer overflow
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
Buffer overflow
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38260
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostParseDeviceConfigurationDescriptor...
CVE-2021-38260
CVE-2021-38260 affects NXP MCUXpresso SDK v2.7.0. A buffer overflow in USB_HostParseDeviceConfigurationDescriptor() could cause memory corruption. CVSSv3.1 base score 7.8 (LOCAL, LOW exploitability, LOW privileges, NONE user interaction) with HIGH impact on confidentiality, integrity, and availab...
CVE-2021-38258
NXP MCUXpresso SDK v2.7.0 was discovered to contain a buffer overflow in the function USBHostProcessCallback...
CVE-2021-38258
CVE-2021-38258 affects NXP MCUXpresso SDK v2.7.0, where a buffer overflow is caused by a memory boundary validation issue in USB_HostProcessCallback(). The vulnerability is rooted in improper boundary checks during memory operations, potentially enabling overflow conditions (buffer/heap) as descr...
Security Bulletin: Multiple vulnerabilities have been identified in IBM SDK, Java Technology Edition shipped with IBM Tivoli Federated Identity Manager
Summary IBM SDK, Java Technology Edition is shipped with IBM Tivoli Federated Identity Manager. Information about security vulnerabilities affecting IIBM SDK, Java Technology Edition has been published in a security bulletin Vulnerability Details Refer to the security bulletins listed in the...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
Design/Logic Flaw
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14264
CVE-2020-14264 affects HCL Traveler Companion for iOS, where the vulnerability stems from a weak cryptographic process in the MobileIron AppConnect SDK included by the app. The issue is a crypto-weakness in the iOS environment exposed via the SDK, potentially impacting confidentiality (per CVSS) ...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect the IBM Installation Manager and IBM Packaging Utility (CVE-2015-2625 and CVE-2015-1931 )
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in July 2015. Vulnerability Details CVEID: CVE-2015-2625 DESCRIPTION...
Authz Module Non-Determinism
Impact Consensus failure for 0.43.x and 0.44.0,1 users. Funds and balances are safe. Patches 0.44.2 Workarounds Manually patch the code. --- Full details posted in https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349...
CVE-2020-14263
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
Design/Logic Flaw
"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"...
CVE-2020-14263
CVE-2020-14263 affects HCL Traveler Companion (iOS) via the MobileIron AppConnect SDK. The underlying issue is described as an iOS weak cryptographic process vulnerability, with the CVSS terms indicating HIGH impact to confidentiality (C: HIGH) but no impact on integrity or availability, and with...