Design/Logic Flaw

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...

CVE-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...

CVE-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...

CVE-2023-35944: Improper Input Validation

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can lead to the rejection of requests wit...

Envoy 环境问题漏洞

Envoy is an open source distributed proxy server. Envoy suffers from an environmental issue vulnerability that stems from the ability to bypass certain requests, which could result in requests using a mixed-case scheme being denied...

PT-2023-3901 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.27.0 Envoy versions prior to 1.26.4 Envoy versions prior to 1.25.9 Envoy versions prior to 1.24.10 Envoy versions prior to 1.23.12 Description: The issue is related to the handling of mixed-case schemes in HTTP/2 by...

CVE-2023-31216

creationtimestamp| type| source ---|---|--- 2023-07-17 18:40:23+00:00| seen| https://t.me/cibsecurity/66825...

CVE-2023-29414

creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:34+00:00| seen| https://t.me/cibsecurity/66509...

uint128 changeAmount might overflow

Lines of code Vulnerability details Impact This issue is an edge case, that uint128 changeAmount could overflow, making the protocol fail for certain amount of swap. Proof of Concept Let's break down the changeAmount: 1. amountOut/amountIn 2. BASE27 3. normalizer File:...

DENIAL OF SERVICE (DoS) WHEN DECREASING THE weight DUE TO UNDERFLOW IN THE UlyssesPool.setWeight FUNCTION

Lines of code Vulnerability details Impact The UlyssesPool.setWeight function is used to update the weight of a particular poolId in the current UlyssesPool. But when the weight of the respective poolId is decreased from the current value, the calculation underflows and thus DoS the reducing of...

CVE-2023-36608

creationtimestamp| type| source ---|---|--- 2023-07-04 22:59:44+00:00| seen| https://t.me/cibsecurity/65883...

CVE-2023-36377

creationtimestamp| type| source ---|---|--- 2023-07-04 00:22:45+00:00| seen| https://t.me/cibsecurity/65878 2025-12-30 14:45:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb7loldne22b...

OESA-2023-1387 qt5-qtbase security update

Qt is a software toolkit for developing applications. Security Fixes: An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security HSTS header, allowing unencrypted connections to be established,...

CVE-2023-3357

creationtimestamp| type| source ---|---|--- 2023-06-29 02:13:20+00:00| seen| https://t.me/cibsecurity/65705 2025-03-11 04:41:13+00:00| seen| Telegram/UAZQfvnJyYxoHYqS95w6Cap5-3O-uUFOYvAe3SnFs8e3ak...

Veeam Cloud Service Provider Case Administrator FAQ

Intended Audience This article contains information that is relevant to Veeam Cloud Service Providers. If you are not a Veeam Cloud Service Provider, please review the following: KB2211: My Account Portal - Role Management FAQ Case Administrator Assignment Restrictions Attempting to assign a case...

mysql-server:fuzz_initfile: Heap-buffer-overflow in my_casedn_str_utf8mb3

Project: https://github.com/mysql/mysql-server.git Detailed Report: https://oss-fuzz.com/testcase?key=4523836947955712 Project: mysql-server Fuzzing Engine: libFuzzer Fuzz Target: fuzzinitfile Job Type: libfuzzerasanmysql-server Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash...

PT-2023-5557

Name of the Vulnerable Software and Affected Versions Eclipse JGit versions prior to 6.6.1.202309021850-r Eclipse JGit versions prior to 6.7.0.202309050840-r Eclipse JGit versions 5.13.3 prior to 5.13.3.202401111512-r Description The issue is related to the handling of symbolic links in Eclipse...

CVE-2023-21657

Memoru corruption in Audio when ADSP sends input during record use case...

Qualcomm Chipsets 代码问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an incorrect type conversion during an audio use case, resulting in audio memory corruption...

PT-2023-18320 · Qualcomm · Snapdragon +131

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in audio when the ADSP sends input during a record use case. No additional details are provided about the estimated...