8570 matches found
kernel: usb: out-of-bounds read in read_descriptors
An out-of-bounds read issue was found in the USB subsystem in the Linux kernel. This flaw allows a malicious user to crash the system, resulting in a denial of service condition...
Improper Certificate Validation
osxcollector is vulnerable to Improper Certificate Validation. The vulnerability is due to incomplete inspection of Universal/fat binaries, which allows malicious code to appear as if it is signed by Apple, leading to the execution of unsigned code...
PT-2024-28088
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition vulnerability has been resolved in the Linux kernel, specifically in the usb: gadget: u audio component. The issue occurred due to the use of controls after free during...
CVE-2024-32482 Tillitis TKey Signer possible RAM disclosure vulnerability
The Tillitis TKey signer device application is an ed25519 signing tool. A vulnerability has been found that makes it possible to disclose portions of the TKey’s data in RAM over the USB interface. To exploit the vulnerability an attacker needs to use a custom client application and to touch the...
Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates
Summary IBM App Connect Enterprise Certified Container ACEcc is built on the Red Hat Universal Base Images. ACEcc operator versions 5.0.17 LTS and 11.5.0 contain fixes to the listed CVEs found in the base images. This bulletin provides patch information to address the reported vulnerabilities...
USB Print Driver Privilege Escalation
The vulnerability of the USB Print Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Tillitis TKey Signer security vulnerability
Tillitis TKey Signer is an open source ed25519 signature tool from Tillitis AB. A security vulnerability exists in Tillitis TKey Signer, which originates from the ability to disclose part of the TKey data in RAM via the USB interface...
PT-2024-24214 · Terratec · Terratec Dmx 6Fire Usb
Name of the Vulnerable Software and Affected Versions: Terratec DMX 6Fire USB version 1.23.0.02 Description: An unquoted service path vulnerability allows a local attacker to escalate privileges via the Program.exe component. Recommendations: For Terratec DMX 6Fire USB version 1.23.0.02, consider...
SUSE CVE-2021-47210
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARNON in tps6598xblockread Calling tps6598xblockread with a higher than allowed len can be handled by just returning an error. There's no need to crash systems with panic-on-warn enabled...
USB HID Analyzer DoS
The vulnerability of the USB HID analyzer used by Wireshark for analyzing computer network traffic is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Silex Technology DS-600 security vulnerability
The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...
CVE-2024-27991
creationtimestamp| type| source ---|---|--- 2024-04-13 00:57:10+00:00| seen| https://t.me/arpsyndicate/4616...
CVE-2024-27992
creationtimestamp| type| source ---|---|--- 2024-04-13 00:32:49+00:00| seen| https://t.me/arpsyndicate/4611...
universal-concept.ch Cross Site Scripting vulnerability OBB-3916101
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2021-47210
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Remove WARNON in tps6598xblockread Calling tps6598xblockread with a higher than allowed len can be handled by just returning an error. There's no need to crash systems with panic-on-warn enabled...
PT-2024-22928 · Unknown · Secure Lockdown Multi Application Edition
Name of the Vulnerable Software and Affected Versions: Secure Lockdown Multi Application Edition version 2.00.219 Description: An issue in the software allows attackers to read arbitrary files via using UNC paths. Recommendations: For Secure Lockdown Multi Application Edition version 2.00.219,...
SUSE CVE-2024-26714
In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware like the UFS controller loses its connection to the rest of the SoC, resulting in a hang of the platform,...
WordPress ShopLentor plugin <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via WL Universal Product Layout vulnerability discovered by wesley wcraft in WordPress Plugin ShopLentor versions = 2.8.3...
UBUNTU-CVE-2024-26748
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix memory double free when handle zero packet 829 if request-complete 830 spinunlock&privdev-lock; 831 usbgadgetgivebackrequest&privep-endpoint, 832 request; 833 spinlock&privdev-lock; 834 835 836 if request-buf ==...
DEBIAN-CVE-2024-26714
In the Linux kernel, the following vulnerability has been resolved: interconnect: qcom: sc8180x: Mark CO0 BCM keepalive The CO0 BCM needs to be up at all times, otherwise some hardware like the UFS controller loses its connection to the rest of the SoC, resulting in a hang of the platform,...