Authentication flaw

An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...

CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

OpenSC 缓冲区错误漏洞

OpenSC is an open source smart card tool and middleware. A security vulnerability exists in OpenSC smart card middleware prior to version 0.23, which originates from a stack overflow that can be caused by a crafted APDU response...

CVE-2021-34193

Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs...

CVE-2023-38909

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function...

CVE-2023-38908

The CVE-2023-38908 entry concerns TP-Link Smart Bulb Tapo series with multiple affected devices and firmware versions (L530 < 1.2.4; L510E < 1.1.0; L630 < 1.0.4; P100

CVE-2023-38909

The CVE-2023-38909 issue affects TP-Link Smart Bulb Tapo Series: L530 (<1.2.4), L510E (<1.1.0), L630 (<1.0.4), P100 (

CVE-2023-38908

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function...

CVE-2021-34193

CVE-2021-34193 describes a stack overflow in the OpenSC smart card middleware (before 0.23) triggered by crafted APDU responses. Affected product: OpenSC smart card middleware (OpenSC). Impact per NVD: high, with availability impact and no confidentiality/integrity impact. Several connected advis...

TP-LINK Smart bulb Tapo 安全漏洞

TP-LINK Smart bulb Tapo is a smart bulb from China P&L TP-LINK. A security vulnerability exists in TP-LINK Smart bulb Tapo, which stems from a vulnerability that allows a remote attacker to obtain sensitive information via authentication code in UDP messages...

CVE-2023-38906

An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...

CVE-2023-38906

TP-Link Tapo family vulnerability CVE-2023-38906 affects L530 (1.0.0–1.1.9), L510E (1.0.8), L630 (1.0.3), P100 (1.4.9), C200 (1.1.18), and Tapo App 2.8.14. Description: remote attacker can obtain sensitive information via the authentication code in UDP messages. Root cause: lack of protection for...

Security Bulletin: Mutiple Vulnerabilties Affecting IBM Watson Machine Learning Accelerator

Summary IBM Watson Machine Learning Accelerator 1.2.x is vulnerable to several vulnerabilities coming from dependent compoents. These are addressed. Vulnerability Details CVEID:CVE-2023-20863 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by improper input...

CVE-2023-4414

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

Command injection

A vulnerability was found in Beijing Baichuo Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can...

Security Bulletin: netplex json-smart-v2 component is vulnerable to CVE-2023-1370 is used by IBM Maximo Application Suite

Summary IBM Maximo Application Suite uses netplex json-smart-v2 package which is vulnerable to CVE-2023-1370. Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION: netplex json-smart-v2 is vulnerable to a denial of service, caused by not limiting the nesting of arrays or objects. By sending a...

CVE-2023-4414 Byzoro Smart S85F Management Platform decodmail.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

CVE-2023-4414 Byzoro Smart S85F Management Platform decodmail.php command injection

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

CVE-2023-4414

The CVE-2023-4414 entry concerns Byzoro/Beijing Baichuo Smart S85F Management Platform up to 20230807. Affected component: /log/decodmail.php. Issue: manipulation of the file argument leads to remote command injection. Impact is described as critical with high confidentiality, integrity, and avai...

WordPress Smart SEO Tool Plugin < 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smart SEO Tool Type Plugin Vulnerable versions 4.0.2 Fixed in 4.0.2 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7f5302fb053b Credits WordFence Required privilege...