CVE Vulnerability Catalog

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library. Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary, including the ability to log in via the web server.

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticated malicious agent can exploit this vulnerability to execute arbitrary commands on the underlying Linux operating system.

An issue was discovered in l2cap_sock_release in the Linux kernel before version 6.4.10, leading to a use-after-free due to mishandling of children of an sk.

An issue was discovered in zola versions 0.13.0 through 0.17.2 related to the web server implementation. The handle_request function does not account for sequences of special path control characters in the URL, allowing directory traversal and reading arbitrary files from the filesystem.

CVE-2023-39406 describes a permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.

Vulnerability related to input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

There is an input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect system availability.

CVE-2023-39395 describes a mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

Vulnerability in the wifienhance module allows API privilege escalation. Successful exploitation of this vulnerability may lead to modification of the ARP list.

Vulnerability in the USB Service module that leads to leakage of system file information. Successful exploitation of this vulnerability may affect data confidentiality.

Vulnerability related to input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

There is a deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect system availability.

Vulnerability related to insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may lead to malicious modification and overwriting of ServiceWifiResources.

Vulnerability related to insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may lead to malicious modification and overwriting of OsuLogin.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may lead to home screen unavailability.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may lead to home screen unavailability.

Vulnerability related to incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally.

The vulnerability in the AMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may compromise apps' data security.

There is an input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.