PT-2023-18181 · Axis Communications +1 · Axis License Plate Verifier +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient file permissions, which could allow unprivileged users to access unencrypted administrator credentials. This access...

PT-2023-18180 · Axis Communications +1 · Axis License Plate Verifier +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is due to insufficient file permissions, allowing unprivileged users to access unencrypted user credentials used in the integration interface towards 3rd party systems...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions,...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and earlier versions,...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. AXIS License Plate Verifier 2.8.3 and prior versions contain a security vulnerability that ste...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions that...

AXIS License Plate Verifier SQL Injection Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and earlier versions,...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions, which...

PT-2023-7486 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns the "search.cgi" file in the AXIS License Plate Verifier, where user-provided input is not properly sanitized, allowing for SQL injections. This could...

PT-2023-7485 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue arises from insufficient input validation in the "api.cgi" file of the License Plate Verifier software, allowing for arbitrary code execution. This can be...

PT-2023-18179 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns unsanitized user-provided input on the "search.cgi" endpoint, allowing for SQL injections. Recommendations: At the moment, there is no information abo...

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

...

CVE-2022-28735

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

Code injection

The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...

CVE-2022-28735

The CVE-2022-28735 entry describes a vulnerability in GRUB2 where the shim_lock verifier allows loading non-kernel files on shim-powered secure boot systems, potentially breaking the secure boot trust-chain by loading unverified code or modules. Connected advisories (e.g., CBLMARINER entries for ...

Amazon Linux 2 : grub2 (ALAS-2023-2146)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2146 advisory. A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows ...

GHSA-G4WG-CFPF-9689 keylime fails to flag device as untrusted when signature does not validate

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

keylime fails to flag device as untrusted when signature does not validate

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

CVE-2023-3674

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...

PYSEC-2023-128

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate for some reason. Instead, it will only emit an error in the log without flagging the device as untrusted...