الباحثون
رجوع
Lin
#6484
من 60,387
48.3
إجمالي CVSS
الثغرات
·
8
متوسطة
5
عالية
3
PT-2024-11230
2021-06-16
5.5
CVE-2021-47221
Linux
Linux Kernel
The issue is related to the SLUB redzoning feature in the Linux kernel, which checks for corruption from `s->object size` instead of `s->inuse`. This can cause the freelist pointer to be written beyond `s->object size` when the object size is less than 24, corrupting the redzone. The problem is visible when using "slub debug=ZF". The kernel adjusts the offset to stay within `s->object size` to resolve the issue. No caches in this size range are known to exist in the kernel currently.
PT-2019-14465
2019-12-20
7.5
CVE-2019-15911
Asus
Asus Ts-101
The issue is related to insecure key transport in ZigBee communication, allowing attackers to obtain sensitive information, cause denial of service attacks, take over smart home devices, and tamper with messages.
PT-2019-14466
2019-12-20
5.0
CVE-2019-15912
Zigbee
Zigbee Pro
An issue was discovered that allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure on devices using ZigBee PRO.
PT-2019-14467
2019-12-20
7.5
CVE-2019-15913
Xiaomi
Xiaomi Rtcgq01Lm
The issue is related to insecure key transport in ZigBee communication. This allows attackers to gain sensitive information, launch denial of service attacks, take over smart home devices, and tamper with messages.
PT-2019-14464
2019-12-20
5.0
CVE-2019-15910
Asus
Asus Ts-101
An issue was discovered that allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network procedure".
PT-2019-14469
2019-12-20
5.0
CVE-2019-15915
Xiaomi
Xiaomi Rtcgq01Lm
An issue allows attackers to perform a denial of service attack by utilizing the "discover ZigBee network procedure".
PT-2019-14468
2019-12-20
5.0
CVE-2019-15914
Xiaomi
Xiaomi Rtcgq01Lm
An issue allows attackers to perform multiple denial of service attacks using the ZigBee trust center rejoin procedure.
PT-2019-2492
2019-06-11
7.8
CVE-2019-1023
Microsoft
Edge
An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow a remote attacker to disclose protected information using a specially crafted web page. The attacker could obtain information to further compromise the user's system.