UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from incorrect input validation in the video decoder. This could result in a local denial of service without requiring additional execute privileges...

CVE-2024-21604: Allocation of Resources Without Limits or Throttling

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

CVE-2022-46025

Totolink N200REV5 V9.3.5u.6255B20211224 is vulnerable to Incorrect Access Control. The device allows remote attackers to obtain Wi-Fi system information, such as Wi-Fi SSID and Wi-Fi password, without logging into the management page...

CVE-2023-40430: Improper Authorization

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to access removable volumes without user consent...

CVE-2023-47995: Buffer Copy without Checking Size of Input

Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImageAllocateBitmap in FreeImage 3.18.0 allows attackers to cause a denial of service...

The vulnerability of the ACEManager component in the microprogramming software ALEOS for Sierra Wireless’ routers allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the ACEManager component in the ALEOS router software from Sierra Wireless relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to trigger a Denial-of-Service attack remotely...

CVE-2023-5630

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...

Design/Logic Flaw

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...

CVE-2023-5630

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...

CVE-2023-46144: Download of Code Without Integrity Check

A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices...

Zultys MX Series Security Vulnerability

Zultys MX Series is a series of IP phones from Zultys USA. A security vulnerability exists in Zultys MX Series, which stems from a susceptibility to authentication bypass, allowing an attacker to gain full administrative access without valid credentials...

SoftIron HyperCloud Security Vulnerability

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud versions 1.0 through prior to 2.0.3, which stems from the fact that removing and re-inserting a drive caddy without rebooting causes the system to recognize the caddy as ...

Buildroot BR_NO_CHECK_HASH_FOR data integrity vulnerability

Talos Vulnerability Report TALOS-2023-1845 Buildroot BRNOCHECKHASHFOR data integrity vulnerability December 5, 2023 CVE Number CVE-2023-43608 SUMMARY A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted...

CVE-2023-24052

An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password...

CVE-2023-6020

LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication...

CVE-2023-5984

A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...

PT-2023-29273 · Apache · Apache Activemq

Name of the Vulnerable Software and Affected Versions: Apache ActiveMQ versions prior to 5.15.16 Apache ActiveMQ versions prior to 5.16.7 Apache ActiveMQ versions prior to 5.17.6 Apache ActiveMQ versions prior to 5.18.3 Description: A new PoC exploit for the Apache ActiveMQ vulnerability allows...

The vulnerability of the `read_formatted_entries` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to induce a service failure.

The vulnerability of the readformattedentries function in the dwarf2.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially...

CVE-2023-29975

An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...

The vulnerability of Qubes Mirage Firewall, related to the execution of a loop with an unavailable exit condition, allows a intruder to trigger a service failure.

The vulnerability of Qubes Mirage Firewall is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted UDP packets...