PT-2023-1304

Name of the Vulnerable Software and Affected Versions Moxa SDS-3008 Series Industrial Ethernet Switch version 2.1 Description A stored cross-site scripting issue exists in the web application functionality, allowing arbitrary Javascript execution through a specially-crafted HTTP request. The...

Video game playing FISH live streams credit card 'theft'

A fish is in hot water metaphorically speaking after having performed some incredible antics on a video game live stream. The fish, known for playing popular video game titles to completion on live streams, decided to take that whole gamer lifestyle thing a little too far and went on a rip-roarin...

Siemens SCALANCE X Products Missing Authentication For Critical Function (CVE-2020-15799)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0. The vulnerability could allow an unauthenticated attacker to reboot the device over the network by usin...

Open vSwitch Integer Overflow Code Execution

The vulnerability of the Open vSwitch multi-level switch lies in the loss of significance of a whole number during the analysis of Auto Attach TLV. Exploiting this vulnerability allows an attacker to send specially crafted LLDP messages to the vulnerable system, causing a full number of significa...

GSD-2023-1000674 USB: gadget: Fix use-after-free during usb config switch

USB: gadget: Fix use-after-free during usb config switch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000121 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

dpaa2-switch: Fix memory leak in dpaa2switchaclentryadd and dpaa2switchaclentryremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 b...

GSD-2023-1000016 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

dpaa2-switch: Fix memory leak in dpaa2switchaclentryadd and dpaa2switchaclentryremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.13 by...

PT-2023-34149

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A node refcount leak was discovered in the usb role switch is parent function. The issue was introduced in version v5.4 and is fixed in Linux Kernel version v5.15.86. Recommendations For Linu...

PT-2023-33198 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue was discovered in the dpaa2-switch component, specifically in the dpaa2 switch acl entry add and dpaa2 switch acl entry remove functions. The actual impact and attack...

PT-2023-34464

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A node refcount leak was discovered in the usb role switch is parent function. The issue was introduced in version v5.4 and is fixed in Linux Kernel version v5.10.163. Recommendations For...

PT-2023-33093 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A memory leak issue was discovered in the dpaa2-switch component, specifically in the dpaa2 switch acl entry add and dpaa2 switch acl entry remove functions. The actual impact and attack...

ROS-20230117-02

A vulnerability in the Open vSwitch software tiered switch is related to loss of integer significance when parsing Auto Attach TLVs. integer when parsing Auto Attach TLVs. Exploitation of the vulnerability could allow an attacker acting remotely to send specially crafted LLDP messages. remotely,...

OESA-2023-1025 openvswitch security update

Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.CVE-2022-4338...

Ethernet Switchboard Memory Release DoS

The vulnerability of the microprogrammed Ethernet switch software from FortiSwitch is related to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending specially crafted LLDP/CDP/EDP packets...

TP-LINK TL-SG105PE(UN) Authorization Issue Vulnerability

The TP-LINK TL-SG105PEUN is a switch from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK TL-SG105PEUN 1.01.0.0 Build 20221208, which can be exploited by an attacker to potentially impersonate the product administrator, potentially gain access to information, and...

AZL-12952 CVE-2022-4337 affecting package openvswitch for versions less than 2.17.5-1

An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch...

UBUNTU-CVE-2022-4338

An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch...

CVE-2022-4702

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprfixroyalcompatibility' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to deactivate every plugin on...

CVE-2022-37934

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerability could be remotely exploited to allow remote directory traversal in HPE OfficeConnect 1820 switch series version PT.02.17 and below, HPE OfficeConnect 1850 switch series...

Hewlett Packard Enterprise OfficeConnect path traversal vulnerability

Hewlett Packard Enterprise OfficeConnect is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise OfficeConnect. An attacker could exploit the vulnerability to read arbitrary files on the server running the application. The followi...