7460 matches found
SUSE CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download...
SUSE CVE-2022-20132
In lgprobe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User...
SUSE CVE-2022-39320
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP may attempt integer addition on too narrow types leads to allocation of a buffer too small holding the data written. A malicious server can trick a FreeRDP based client to read out of bound data and send i...
SUSE CVE-2022-43750
drivers/usb/mon/monbin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory...
SUSE CVE-2022-45888
An issue was discovered in the Linux kernel through 6.0.9. drivers/char/xillybus/xillyusb.c has a race condition and use-after-free during physical removal of a USB device...
The vulnerability in the driver/hid/hid-bigbenff.c kernel of the Linux operating system, which allows a hacker to trigger a service failure.
The vulnerability of the drivers/hid/hid-bigbenff.c kernel module in the Linux operating system is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker to trigger a service failure using a specially crafted USB device, which appears to be a...
PT-2023-35313 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.229 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, specifically the pn533 driver. It involves waiting for out urb's completion. The actual impact...
PT-2023-35263 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.164 Description: The issue is related to the pn533 usb send frame function in the Linux Kernel's NFC subsystem, where it does not wait for out urb's completion. This could potentially lead to security...
The Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long.
...
PT-2025-54099
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc3-15798-g5a41237ad1d4-dir8 Description The Linux kernel contains use-after-free UAF bugs in the media subsystem, specifically within the Siano USB driver, caused by the do submit urb function. These bugs...
CVE-2021-37518
Universal Cross Site Scripting UXSS vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature...
Cross site scripting
Universal Cross Site Scripting UXSS vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature...
A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially
...
CVE-2021-37518
Universal Cross Site Scripting UXSS vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature...
PT-2023-12326 · Unknown · Vimium Extension
Name of the Vulnerable Software and Affected Versions: Vimium Extension versions 1.66 and earlier Description: A Universal Cross Site Scripting UXSS issue in the omnibar feature allows remote attackers to run arbitrary code. Recommendations: For versions 1.66 and earlier, update to a version late...
CVE-2021-37518
CVE-2021-37518 (Vimium Extension) : A Universal Cross Site Scripting (UXSS) flaw affects Vimium Extension versions 1.66 and earlier, permitting a remote attacker to run arbitrary code via the omnibar feature. The CVSSv3.1 base score is 6.1 (Medium) with Network attack vector, Low integrity/low co...
CVE-2021-37518
Universal Cross Site Scripting UXSS vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature...
CVE-2023-0650
creationtimestamp| type| source ---|---|--- 2023-02-02 18:44:58+00:00| seen| https://t.me/cibsecurity/57405...
AZL-34804 CVE-2023-25012 affecting package hyperv-daemons for versions less than 6.6.14.1-1
The Linux kernel through 6.1.9 has a Use-After-Free in bigbenremove in drivers/hid/hid-bigbenff.c via a crafted USB device because the LED controllers remain registered for too long...