12955 matches found
CVE-2023-0204
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...
Improper access control
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...
Design/Logic Flaw
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...
CVE-2023-0205
CVE-2023-0205 affects NVIDIA ConnectX firmware on ConnectX-5, ConnectX-6, and ConnectX6-DX. The root cause is insufficient granularity of access control in the NIC firmware, which can allow an unprivileged user to cause a denial of service. The NVIDIA advisory consolidates this with CVSS-based im...
CVE-2023-0205
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...
CVE-2023-0205
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...
CVE-2023-0204
CVE-2023-0204 affects NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX NIC firmware. The issue is described as improper handling of exceptional conditions in the NIC firmware, resulting in denial of service by an unprivileged user. The vulnerability impacts the NIC firmware layer, with potential f...
CVE-2023-0204
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...
CVE-2023-0204
NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...
CVE-2023-0203
CVE-2023-0203 affects NVIDIA ConnectX firmware on ConnectX-5, ConnectX-6, and ConnectX6-DX. The issue stems from insufficient granularity of access controls in the NIC firmware, enabling an unprivileged user to cause a denial of service. NVIDIA’s security bulletin lists CVE-2023-0203 with base sc...
PT-2023-16084 · Nvidia · Nvidia Connectx6-Dx +2
Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5 affected versions not specified NVIDIA ConnectX-6 affected versions not specified NVIDIA ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC...
PT-2023-16083 · Nvidia · Nvidia Connectx6-Dx +2
Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to improper handling of exceptional conditions in the NIC firmware, which may lead to denial of service. An unprivileged user ca...
CVE-2023-2017
Server-side Template Injection SSTI in Shopware 6 = v6.4.20.0, v6.5.0.0-rc1 = v6.5.0.0-rc4, affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in...
Input validation
Server-side Template Injection SSTI in Shopware 6 = v6.4.20.0, v6.5.0.0-rc1 = v6.5.0.0-rc4, affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in...
CVE-2023-2017 Improper Control of Generation of Code in Twig Rendered Views in Shopware
Server-side Template Injection SSTI in Shopware 6 = v6.4.20.0, v6.5.0.0-rc1 = v6.5.0.0-rc4, affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in...
CVE-2023-2017
Shopware 6 experienced a regression of CVE-2023-2017 in versions 6.7.0.0 to before 6.7.6.1, where an array- and array-crafted PHP Closure could bypass allow-list checks for map(...) overrides in Twig rendered views. This reopens the security issue by not properly filtering generatedCode in Twig, ...
CVE-2023-2017 Improper Control of Generation of Code in Twig Rendered Views in Shopware
Server-side Template Injection SSTI in Shopware 6 = v6.4.20.0, v6.5.0.0-rc1 = v6.5.0.0-rc4, affecting both shopware/core and shopware/platform GitHub repositories, allows remote attackers with access to a Twig environment without the Sandbox extension to bypass the validation checks in...
Code injection
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3...
CVE-2023-24607
Qt before 6.4.3 allows a denial of service via a crafted string when the SQL ODBC driver plugin is used and the size of SQLTCHAR is 4. The affected versions are 5.x before 5.15.13, 6.x before 6.2.8, and 6.3.x before 6.4.3...
