CVE-2023-3110

Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution...

CVE-2023-0971

A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered...

si-welkenraedt.org Cross Site Scripting vulnerability OBB-3409094

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

si-welkenraedt.be Cross Site Scripting vulnerability OBB-3340467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

si-knives.se Cross Site Scripting vulnerability OBB-3336171

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SiLabs Z-Wave over IP Gateway 缓冲区错误漏洞

The SiLabs Z-Wave over IP Gateway is a hardware unit that plugs into a Wi-Fi router and is used to add and configure Z-Wave devices as well as create and run "scenarios". A security vulnerability exists in SiLabs Z-Wave over IP Gateway. No information about this vulnerability is available at this...

si-listserv.si.edu Cross Site Scripting vulnerability OBB-3180473

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in si-mfes-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce66f60ce8e0169f64447e31e694ce9b4ff96cc0df232f7fc7c443db576d4d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-775 Malicious code in si-mfes-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce66f60ce8e0169f64447e31e694ce9b4ff96cc0df232f7fc7c443db576d4d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tdype-si (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22f1742907d020815614e7d74137913a2586d84e6b922f311dcb861ee3d6891e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

new packages: hunspell-si

An update is available for hunspell-si. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

CVE-2021-42324

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

Design/Logic Flaw

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

CVE-2021-42324

The CVE-2021-42324 issue affects DCN S4600-10P-SI switches (pre-R0241.0470). Root cause: improper parameter validation in the console interface. An authenticated, low-privilege attacker can escape the sandbox and execute system commands as root via shell metacharacters in the capture command para...

CVE-2021-42324

An issue was discovered on DCN Digital China Networks S4600-10P-SI devices before R0241.0470. Due to improper parameter validation in the console interface, it is possible for a low-privileged authenticated attacker to escape the sandbox environment and execute system commands as root via shell...

Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. An arbitrary file read vulnerability exists in the Flash Flood Monitoring and Warning Platform of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Technology Limited (CNVD-2022-10306)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. An arbitrary file read vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive informati...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd (CNVD-2022-10323)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Limited, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...