8221 matches found
Qualcomm chip buffer error vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the WLAN module of the Qualcomm chip that...
Code injection
Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site user to escalate privileges via a manipulated unixcat executable...
PT-2023-13803 · Unknown · Wlan Firmware
Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in the WLAN Firmware. This occurs while processing the CCKM IE in a reassoc respon...
Fedora 37 : webkitgtk (2023-5210df1dd1)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5210df1dd1 advisory. Improve GStreamer multimedia playback across the board with improved codec selection logic, better handling of latency, and improving frame discard ...
Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
...
CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0...
Special Element Injection
radare2, edge is vulnerable to Special Element Injection. The vulnerability exists due to improper implementation special elements into a different plane which allows an attacker to inject and execute malicious sql queries on the system...
Cross-site Scripting (XSS)
Overview sanitize is a Ruby HTML and CSS sanitizer. Affected versions of this package are vulnerable to Cross-site Scripting XSS when a custom allowlist is configured to allow noscript elements. Workarounds Users who are unable to upgrade to the fixed version can prevent this issue by using one o...
DEBIAN-CVE-2023-23627
Sanitize is an allowlist-based HTML and CSS sanitizer. Versions 5.0.0 and later, prior to 6.0.1, are vulnerable to Cross-site Scripting. When Sanitize is configured with a custom allowlist that allows noscript elements, attackers are able to include arbitrary HTML, resulting in XSS cross-site...
dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type
A vulnerability found in D-bus. This flaw allows an authenticated attacker to cause dbus-daemon and other programs that use libdbus to crash when receiving a message whose array length is inconsistent with the size of the element type...
Zoom video conferencing software Privilege Escalation
The vulnerability of Zoom video conferencing software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to elevate their privileges to that of the SYSTEM user...
Chrome JSNativeContextSpecialization::BuildElementAccess Bypass Exploit
Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...
Chrome JSNativeContextSpecialization::BuildElementAccess Bypass
Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...
DEBIAN-CVE-2022-41859
In freeradius, the EAP-PWD function computepasswordelement leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack...
ALPINE-CVE-2022-41859
In freeradius, the EAP-PWD function computepasswordelement leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack...
PT-2023-33169 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: A buffer overflow issue exists in the elem comparison of cfg80211, a WiFi configuration module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...
CVE-2023-0302
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...
UBUNTU-CVE-2023-0302
Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository radareorg/radare2 prior to 5.8.2...
PT-2023-16157 · Radare2 +1 · Radare2 +1
Name of the Vulnerable Software and Affected Versions: radare2 versions prior to 5.8.2 Description: The issue is related to a failure to sanitize special elements into a different plane, also known as Special Element Injection. This problem affects the radare2 GitHub repository. There is no...
