CVE-2023-21660 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing FT Information Elements...

CVE-2023-21660

The CVE-2023-21660 entry concerns Qualcomm WLAN Firmware and related chipsets, where a vulnerability causes a transient Denial-of-Service when parsing FT Information Elements in WLAN frames. Documents consistently describe the issue as a transient DOS affecting WLAN Firmware during FT IE parsing,...

CVE-2023-21660 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing FT Information Elements...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets due to a denial of service in the WLAN firmware when parsing FT information elements...

PT-2023-18323 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing FT Information Elements. Recommendations: At the moment, there is no information...

CVE-2023-21660: Buffer Over-read

Transient DOS in WLAN Firmware while parsing FT Information Elements...

The vulnerability of D-Link DIR-846 router’s microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system command. This allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-846 router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2022-47139

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2022-47139 WordPress WP Basic Elements Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2022-47139

CVE-2022-47139 is a Cross-Site Request Forgery (CSRF) vulnerability in WordPress plugin WP Basic Elements (

WordPress plugin WP Basic Elements 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2023-15184 · WordPress · Wp Basic Elements

Name of the Vulnerable Software and Affected Versions: WP Basic Elements plugin versions prior to 5.2.15 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web...

CVE-2022-47139: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Damir Calusic WP Basic Elements plugin = 5.2.15 versions...

CVE-2023-2064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20...

CVE-2023-2045

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4...

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.60 is vulnerable to Other Vulnerability Type

Software Unlimited Elements For Elementor Free Widgets, Addons, Templates Type Plugin Vulnerable versions = 1.5.60 Fixed in 1.5.61 OWASP Top 10 A6: Security Misconfiguration Classification Other Vulnerability Type CVE CVE-2023-31090 Patch priority Low CVSS severity Low 9.9 Developer Unlimited...

FreeBSD : postgresql-server -- CREATE SCHEMA ... schema elements defeats protective search_path changes (fbb5a260-f00f-11ed-bbae-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fbb5a260-f00f-11ed-bbae-6cc21735f730 advisory. - CREATE SCHEMA ... schemaelement defeats protective searchpath changesmore details CVE-2023-2454 Note...

Stored cross-site scripting via RSS feed

Description Due to the improper handling of RSS titles in inc/parser/xhtml.php, a malicious RSS feed can be used to inject arbitrary HTML elements into the page, resulting in cross-site scripting. inc/parser/xhtml.php line 1292-1294 javascript else $this-doc .= ' '.$item-gettitle; Proof of Concep...