.NET Core Multiple Vulnerabilities - Windows

.NET Core is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:microsoft:asp.netcore";...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a buffer overflow vulnerability that stems from a flaw in the frame buffer console fbcon that fails to properly check fbconsetfont when provided...

Denial of service via HTTP/2 HEADERS frames padding

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-http2 versions from 1.0.0 to 1.19.2. It is fixed in 1.20.0 and later releases. This vulnerability is caused by a logica...

CVE-2023-3140

Missing HTTP headers X-Frame-Options, Content-Security-Policy in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a...

CVE-2023-3140

CVE-2023-3140 affects KNIME Business Hub prior to 1.4.0. The root cause is a missing HTTP security header set (X-Frame-Options and Content-Security-Policy), enabling clickjacking where an attacker can embed the app in a malicious page and trick users into actions on the original site. Impact deta...

The vulnerability of the ABB eSOMS software for managing production processes allows a hacker to expose accounting data for authentication purposes and carry out clickjacking attacks.

The vulnerability of the ABB eSOMS production process management software lies in the absence of the X-Frame-Options header in HTTP responses. Exploiting this vulnerability allows a remote attacker to obtain authentication credentials and perform clickjacking attacks...

PT-2023-23297 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.4.0 Description: The issue is related to missing HTTP headers, specifically X-Frame-Options and Content-Security-Policy, in KNIME Business Hub. This omission leaves users vulnerable to clickjacking...

CVE-2023-21661

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21669

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

Design/Logic Flaw

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...

Information disclosure

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669

CVE-2023-21669 affects Qualcomm WLAN components. The root cause is a buffer over-read in the WLAN HOST when processing a DPP action frame to a peer with an invalid source address, leading to information disclosure. CVSS base metrics in available records indicate HIGH impact to confidentiality (C)...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21658 Buffer Over-Read in WLAN Firmware

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...

PT-2023-18330 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN HOST affected versions not specified Description: The issue involves an information disclosure in WLAN HOST when sending a DPP action frame to a peer with an invalid source address. Recommendations: At the moment, there is no information...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : nghttp2 vulnerability (USN-6142-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6142-1 advisory. Gal Goldshtein discovered that nghttp2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...

The vulnerability in the `libavcodec/pthread_frame.c` component of the multimedia library FFmpeg, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the libavcodec/pthreadframe.c component in the FFmpeg multimedia library is related to the use of memory after it is freed during the processing of working threads by the decoder hwaccel. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...