7510 matches found
CVE-2022-33271 Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing NMF frame...
CVE-2022-33271 Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing NMF frame...
PT-2023-13343 · Wlan Host · Wlan Host
Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN Host while parsing frame information. Recommendations: At the moment, there is no...
PT-2023-13309 · Qualcomm · Snapdragon +126
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a transient DOS due to a buffer over-read in WLAN, occurring when processing an incoming management frame with incorrectly filled Information Elements IEs...
PT-2023-13344 · Wlan Host · Wlan Host
Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient DOS caused by improper input validation in the WLAN Host while parsing a frame during defragmentation. Recommendations: At the moment, there is no...
PT-2023-13284 · Wlan · Wlan
Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to memory corruption due to a stack-based buffer overflow in the WLAN component. This occurs when the system encounters an invalid WNM frame length. Recommendations: At th...
PT-2023-1425 · Adobe · Framemaker
Name of the Vulnerable Software and Affected Versions: Adobe FrameMaker versions 2020 Update 4 and earlier, 2022 and earlier Description: The issue is related to an out-of-bounds write vulnerability in the memory buffer of Adobe FrameMaker, which could result in arbitrary code execution in the...
GSD-2023-1001791 nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()
nfc: pn533: Wait for outurb's completion in pn533usbsendframe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.164 by commit...
PT-2023-34800 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v2.6.12 through v6.1.6 Description: The issue is related to the handling of extension header length in rawv6 push pending frames. The actual impact and attack plausibility have not yet been proven. Recommendations: For...
CVE-2022-47100
A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...
CVE-2022-47100
A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...
Design/Logic Flaw
A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...
SUSE-SU-2023:0153-1 Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-0056: Fixed a server crash that could be triggered via a malformed HTTP/2 frame bsc1207181...
Sengled Smart bulb 安全漏洞
Sengled Smart bulb is a sensor multi-color smart bulb from Sengled. A security vulnerability exists in Sengled Smart bulb version 0x0000024, which stems from a vulnerability that allows an attacker to perform a factory reset on an arbitrary device via a crafted IEEE 802.15.4 frame...
CVE-2023-23609 contiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to an out-of-bounds write that can occur in the BLE-L2CAP module. The Bluetooth Low Energy - Logical Link Control and Adaptation Layer Protocol BLE-L2C...
Improper Restriction of Rendered UI Layers or Frames
Description It can be possible to perform a clickjacking attack due to the lack of frame restrictions. The application does not set the response header X-Frame-Options: DENY. Proof of Concept http://localhost:8000/admin/ Response headers http HTTP/1.1 200 OK Server: gunicorn Date: Tue, 24 Jan 202...
PT-2023-15170 · Sengled · Sengled Smart Bulb
Name of the Vulnerable Software and Affected Versions: Sengled Smart bulb version 0x0000024 Description: A vulnerability in the Sengled Smart bulb allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame. Recommendations: For Sengled Smart bulb versi...
CVE-2022-47100
A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame...
CVE-2022-47100
The CVE-2022-47100 entry concerns Sengled Smart bulb version 0x0000024, where a vulnerability allows an attacker to arbitrarily perform a factory reset via a crafted IEEE 802.15.4 frame. The available data identifies impact as availability loss (device reset), with CVSS v3.1 metrics showing Netwo...