653 matches found
CVE-2022-25922
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions...
CVE-2022-25922
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions...
Authorization
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions...
Design/Logic Flaw
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals...
CVE-2022-26131 ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals...
CVE-2022-26131 ICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J2497
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals...
CVE-2022-26131
CVE-2022-26131 affects Power Line Communications PLC4TRUCKS J2497 (PLC) trailer receivers. Technical details in connected docs show Improper Protection against Electromagnetic Fault Injection (CWE-1319) with a CVSSv3 base score of 9.3, and related Missing Authentication for Critical Function (CWE...
CVE-2022-25922 ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions...
CVE-2022-25922
CVE-2022-25922 affects the Power Line Communications PLC4TRUCKS J2497 trailer brake controllers, where diagnostic functions can be invoked by replaying J2497 messages due to missing authentication/authorization for critical functions. This allows a remote attacker on the network/vehicle bus to tr...
PT-2022-17691
Name of the Vulnerable Software and Affected Versions PLC4TRUCKS J2497 trailer receivers affected versions not specified Description The issue concerns Power Line Communications PLC4TRUCKS J2497 trailer receivers, which are susceptible to remote RF induced signals. Recommendations At the moment,...
CVE-2022-25922: Missing Authentication for Critical Function
Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions...
CVE-2022-26131: Improper Protection against Electromagnetic Fault Injection (EM-FI)
Power Line Communications PLC4TRUCKS J2497 trailer receivers are susceptible to remote RF induced signals...
Trailer Power Line Communications 访问控制错误漏洞
Trailer Power Line Communications is a bi-directional serial communication link on vehicle power lines from Transportation Systems Sector. An access control error vulnerability exists in Trailer Power Line Communications PLC J2497, which can be exploited by an attacker to invoke the device's brak...
trailer-store.com Cross Site Scripting vulnerability OBB-2353636
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability...
CVE-2021-33792
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...
CVE-2021-33792
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...
Out-of-bounds
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...
CVE-2021-33792
Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary...
PT-2021-20321
Name of the Vulnerable Software and Affected Versions: Foxit Reader versions prior to 10.1.4 PhantomPDF versions prior to 10.1.4 Description: The issue is related to an out-of-bounds write that can occur via a crafted /Size key in the Trailer dictionary. Recommendations: For Foxit Reader versions...