Lucene search
+L

979 matches found

CNNVD
CNNVD
added 2022/07/12 12:00 a.m.11 views

SAMSUNG USB Driver 安全漏洞

Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...

5.5CVSS5.8AI score0.00142EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/07/11 1:37 p.m.33 views

CVE-2022-33711

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...

5.8AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/11 1:37 p.m.55 views

CVE-2022-33711

The CVE-2022-33711 issue affects Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0, due to improper validation of an integrity check. This enables local attackers to delete arbitrary directories via a directory junction. Affected component: Samsung USB Driver Window...

5.5CVSS5.4AI score0.00142EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/07/01 12:00 a.m.24 views

ASB-A-216825460

In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00138EPSS
SaveExploits0References3
OSV
OSV
added 2022/06/28 8:14 p.m.11 views

GSD-2022-1004031 drivers: usb: host: Fix deadlock in oxu_bus_suspend()

drivers: usb: host: Fix deadlock in oxubussuspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/06/28 8:04 p.m.10 views

GSD-2022-1003941 usb: dwc2: gadget: don't reset gadget's driver->bus

usb: dwc2: gadget: don't reset gadget's driver-bus This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/06/28 7:52 p.m.8 views

GSD-2022-1003824 drivers: usb: host: Fix deadlock in oxu_bus_suspend()

drivers: usb: host: Fix deadlock in oxubussuspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/06/28 5:57 p.m.6 views

GSD-2022-1002555 drivers: usb: host: Fix deadlock in oxu_bus_suspend()

drivers: usb: host: Fix deadlock in oxubussuspend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...

7.2AI score
SaveExploits0
NVD
NVD
added 2022/06/20 6:15 a.m.24 views

CVE-2022-21742

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services...

6.5CVSS0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/20 6:15 a.m.6 views

CVE-2022-21742

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services...

6.5CVSS6.1AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/06/20 5:30 a.m.27 views

CVE-2022-21742 Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family - Buffer Overflow

Realtek USB driver has a buffer overflow vulnerability due to insufficient parameter length verification in the API function. An unauthenticated LAN attacker can exploit this vulnerability to disrupt services...

6.2CVSS6.9AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/20 11:04 a.m.3 views

OESA-2022-1666 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: usb8devstartxmit in drivers/net/can/usb/usb8dev.c in the Linux kernel through 5.17.1 has a double free.CVE-2022-28388 mcbausbstartxmit in drivers/net/can/usb/mcbausb.c in the Linux kernel through 5.17.1 has a double...

7.8CVSS6.3AI score0.00582EPSS
SaveExploits1References4
Veracode
Veracode
added 2022/05/14 8:53 p.m.53 views

Denial Of Service (DoS)

linux is vulnerable to denial of service. The vulnerability exists in the drivers/usb/gadget/composite.c due to the lack of validation in the interface OS descriptor requests, allowing an attacker to cause an application crash...

4.6CVSS6.2AI score0.00927EPSS
SaveExploits0References11Affected Software2
OSV
OSV
added 2022/05/12 12:03 a.m.17 views

USN-5413-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Jeremy Cline discovered a use-after-free in the nouveau graphics driver of the Linux kernel during device removal. A privileged or physically proximate attacker could use this to cause a denial of service system crash. CVE-2020-27820 It was discovered that a race condition existed in the network...

8.8CVSS6.8AI score0.02151EPSS
SaveExploits1References7
zdt
zdt
added 2022/05/12 12:00 a.m.284 views

UDisk Monitor Z5 Phone - (MonServiceUDisk.exe) Unquoted Service Path Vulnerability

Exploit Title: UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path Discovery by: Edgar Carrillo Egea // https://twitter.com/ecarrilloeg Vendor Homepage: https://www.zte.com.cn/global/ Tested Version: 2.0.3.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Window...

7.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/05/10 1:43 p.m.7 views

kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device

A denial of service flaw was found in mwifiexusbrecv in drivers/net/wireless/marvell/mwifiex/usb.c in the usb subsystem of the Linux kernel. This is due to a missing clean-up for a malfunctioning usb device with an unknown recvtype...

4.6CVSS6.6AI score0.00643EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/05/10 12:00 a.m.54 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0014)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel packages installed that are affected by multiple vulnerabilities: - An issue was discovered in the Linux kernel before 5.2.6. On NUMA systems, the Linux fair scheduler has a use-after-free in shownumastats because NU...

7.8CVSS6.8AI score0.00819EPSS
SaveExploits2References9
NVD
NVD
added 2022/04/11 8:15 p.m.33 views

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

7.8CVSS0.00334EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.5 views

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00334EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/11 8:15 p.m.23 views

Path traversal

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

4.6CVSS7.7AI score0.00334EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder