498 matches found
PT-2020-11382
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a missing bounds check in the fpc ta pn get unencrypted image function of fpc ta pn.c, which could lead to a possible out of bounds write. This could result in local escalation of privilege,...
CVE-2019-12183
Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...
Improper access control
Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...
CVE-2019-12183
CVE-2019-12183 affects Safescan Timemoto TM-616 and TA-8000 series. Description: Incorrect Access Control in the administrative API can let remote attackers read arbitrary files. Root cause: improper access controls in the admin API; impacts are partial confidentiality loss (read access) with net...
PT-2020-9299
Name of the Vulnerable Software and Affected Versions Safescan Timemoto TM-616 and TA-8000 series affected versions not specified Description The issue concerns incorrect access control, allowing remote attackers to read any file via the administrative API. This could potentially lead to...
CVE-2019-12183: Improper Privilege Management
Incorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers to read any file via the administrative API...
SafeScan
Remote code execution on biometric IoT devices Biometric dev...
Design/Logic Flaw
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...
CVE-2020-7235: Improper Neutralization of Input During Web Page Generation
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= profile title...
PT-2020-19485
Name of the Vulnerable Software and Affected Versions UHP UHP-100 versions 3.4.1.15, 3.4.2.4, and 3.4.3 Description The issue allows for XSS via the cB3?ta= parameter, which is related to the profile title. Recommendations For versions 3.4.1.15, 3.4.2.4, and 3.4.3, consider restricting access to...
SQL injection vulnerability in the Ta***.cl***.php file in the backend of Dream CMS
Dream CMS short for "lmxcms" is an open source website management system cms with no license restrictions. A SQL injection vulnerability exists in the Ta.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...
FANUC 21i-TA Control System
Binary data 764784.prm...
FANUC 16i-TA Control System
Binary data 764775.prm...
CVE-2019-2235
Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...
Buffer overflow
Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...
PT-2019-16315
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9206 through SD 8CX Qualcomm Snapdragon Compute versions MDM9206 through SD 8CX Qualcomm Snapdragon Connectivity versions MDM9206 through SD 8CX Qualcomm Snapdragon Consumer Electronics Connectivity version...
CVE-2019-2235: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil...
Vulnerability of the start_TA_task function (with a shift of 0x137F7C) in the TEE OS Trusted Core component of the operating system’s SMC handler. This vulnerability allows a malicious actor to trigger a service failure in the Huawei Mate 9 Pro mobile phone’s microprogramming system.
The vulnerability of the startTAtask function with a offset of 0x137F7C in the SMC handler of the operating system TEE OS Trusted Core in the microprogramming environment of the Huawei Mate 9 Pro mobile phone is related to the assignment of an untrusted pointer. Exploiting this vulnerability can...
