8567 matches found
Linux kernel udf DoS
The vulnerability of the udf component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
DENX Software Engineering: U-Boot security vulnerability
DENX Software Engineering Das U-Boot is a Universal Bootloader from DENX Software Engineering, Germany. A security vulnerability exists in versions prior to DENX Software Engineering Das U-Boot 2025.01-rc1, which stems from a heap memory corruption in squashfs directory listings due to a failure ...
DENX Software Engineering: U-Boot security vulnerability
DENX Software Engineering Das U-Boot is a Universal Bootloader from DENX Software Engineering, Germany. A security vulnerability exists in versions prior to DENX Software Engineering Das U-Boot 2025.01-rc1, which stems from an integer overflow in symbolic link parsing that results in a memory...
CVE-2025-1367
A vulnerability was found in MicroWord eScan Antivirus 7.0.32 on Linux. It has been classified as critical. This affects the function sprintf of the component USB Password Handler. The manipulation leads to buffer overflow. An attack has to be approached locally. The vendor was contacted early...
CVE-2024-47006
Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-21101
creationtimestamp| type| source ---|---|--- 2025-02-14 10:01:38+00:00| seen| Telegram/iMDRkkz03WY9pLLV4OOULmD-27f2da1sgnC6CZfswdzBxZ5s...
CVE-2024-37601
An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...
CVE-2023-34402
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside file is encapsulate another file, which service will drop during processing. Due to missed checks, attacker can achieve Arbitrary File Write with service speech rights...
CVE-2023-34401
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder there is a file, which is encoded with proprietary UD2 codec. Due to missed size checks in the enapsulate file, attacker can achieve Out-of-Bound Read in heap memory...
CVE-2023-34400
Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. In case of parsing file, service try to define header inside the file and convert it to null-terminated string. If character is missed, will return null pointer...
kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
A vulnerability was found in the Linux kernel's USB Video Class driver. A buffer for video frame data is allocated, which does not account for all of the frame formats contained in a video stream, leading to an out-of-bounds write when a stream includes frames with an undefined format. An attacke...
Malicious code in tenable-universal-layout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1380 Malicious code in tenable-universal-layout (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a06fb3037f4c830e070f05524b0e4d6e3cb5adec2e77bc06f20ee92a42742689 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Mercedes-Benz NTG security vulnerabilities
Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG that originates from a service crash when importing or exporting profile settings via USB...
Mercedes-Benz NTG security vulnerabilities
Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG 6 that originates from a file parsing failure when importing or exporting profile settings via USB...
CVE-2024-47006
Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-47006
The CVE-2024-47006 is tied to the Intel RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows 10. Affected component: the UWP driver itself; root cause described as an uncontrolled search path. Impact: potential privilege escalation for an authenticated user with local access,...
CVE-2024-47006: Uncontrolled Search Path Element
Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-24426
creationtimestamp| type| source ---|---|--- 2025-02-11 21:33:43+00:00| seen| https://t.me/cvedetector/17748...
kernel: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
A vulnerability was found in the Linux kernel's USB Video Class driver. A buffer for video frame data is allocated, which does not account for all of the frame formats contained in a video stream, leading to an out-of-bounds write when a stream includes frames with an undefined format. An attacke...