Privilege escalation

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

Code injection

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48425

CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...

CVE-2023-48424

CVE-2023-48424 is an elevation of privilege flaw in the U-Boot shell affecting Chromecast/AMLogic bootloader components, described as enabling privilege escalation on a production device. The Chromecast Security Bulletin (Chromecast 2023-12-01) places CVE-2023-48424 under AMLogic with High severi...

CVE-2023-48424

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

CVE-2023-48425: Improper Input Validation

U-Boot vulnerability resulting in persistent Code Execution...

CVE-2023-48424: Undefined Security Weakness

U-Boot shell vulnerability resulting in Privilege escalation in a production device...

PT-2023-30844 · U-Boot · U-Boot

Name of the Vulnerable Software and Affected Versions: U-Boot affected versions not specified Description: The issue is related to a U-Boot shell vulnerability that results in privilege escalation in a production device. Recommendations: At the moment, there is no information about a newer versio...

CVE-2023-40053

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

CVE-2023-40053

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

Design/Logic Flaw

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

CVE-2023-40053 HTML injection Vulnerability in Serv-U 15.4

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

CVE-2023-40053

The affected product is SolarWinds Serv-U 15.4. A vulnerability in the file share function allows an authenticated actor to insert content, potentially enabling malicious use. CVSS v3.1 base score 5.0 (Medium) with network access, low attack complexity, low privileges required, and changed scope....

CVE-2023-40053: Improper Input Validation

A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously...

SolarWinds Serv-U FTP Server Input Validation Error Vulnerability

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. An input validation error vulnerability exists in SolarWinds Serv-U FTP Server version 15.4, which originates from allowing an authenticated attacker to insert content on the fi...

SolarWinds Serv-U 15.4 < 15.4.1

The version of SolarWinds Serv-U installed on the remote host is prior to 15.4.1. It is, therefore, affected by a vulnerability as referenced in the serv-u1541 advisory. - A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share...

Ubuntu: Security Advisory (USN-6523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6523-1 u-boot-nezha vulnerability

It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2022-2347 Nicolas Bidron and Nicolas Guigo discovered that U-Boot...