32 matches found
CVE-2025-21659 netdev: prevent accessing NAPI instances from another namespace
In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI...
CVE-2025-21659
In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI...
CVE-2023-21659
Transient DOS in WLAN Firmware while processing frames with missing header fields...
CVE-2023-21659
CVE-2023-21659 is a Qualcomm WLAN firmware issue described as a Transient DoS when processing frames with missing header fields. Connected sources label it as a Buffer Over-read in WLAN firmware affecting Qualcomm components; the exact affected firmware versions and a fix are not detailed in the ...
CVE-2023-21659 Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while processing frames with missing header fields...
Jenkins Filesystem Trigger Plugin XML External Entity Expansion (CVE-2021-21659)
An XML external entity expansion vulnerability exists in Jenkins Filesystem Trigger Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
CVE-2022-21659
creationtimestamp| type| source ---|---|--- 2022-02-01 00:25:37+00:00| seen| https://t.me/cibsecurity/36603...
CVE-2022-21659 Observable Response Discrepancy in Flask-AppBuilder
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by timing the response time from the server...
CVE-2021-21659
Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2021-21659
Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2021-21659
Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...
CVE-2021-21659
The CVE-2021-21659 entry corresponds to an XXE vulnerability in the Jenkins URLTrigger Plugin (versions 0.48 and earlier). The issue arises from the plugin not configuring its XML parser to disable external entity resolution, enabling crafted XML to cause disclosure of secrets, server-side reques...