PT-2023-28364

Name of the Vulnerable Software and Affected Versions Biller Direct affected versions not specified Description An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct...

Cross-site Scripting (XSS)

Overview Squidex.ClientLibrary is a ClientLibrary for Squidex Headless CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due an incomplete blacklist in the SVG inspection process. An attacker can inject malicious JavaScript via the SRC attribute of an IFRAME elemen...

CLSA-2023-1701799960 Fix of 8 CVEs

CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb:...

CVE-2023-33097

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33080

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware while processing a FTMR frame...

Information disclosure

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33097

CVE-2023-33097 is described as a Transient DOS in WLAN Firmware when processing a FTMR frame. Connected sources (e.g., CVE List entry) indicate the root cause as a Buffer Over-read in the WLAN Firmware. Public records in this set reference Qualcomm chipset components and denote a High severity (C...

CVE-2023-33097 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33081 Buffer over-read in WLAN Firmware

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33081

CVE-2023-33081 is a Qualcomm WLAN firmware issue described as a buffer over-read in a closed-source WLAN component, causing a transient Denial of Service during OTA broadcast when converting Target Wake Time (TWT) frame parameters. The impact is a DoS that is transient and tied to the OTA TWT par...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33080 Buffer over-read in WLAN Firmware

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33097: Buffer Over-read

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33081: Buffer Over-read

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

CVE-2023-5768

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

njs interpreter Heap Buffer Overflow DoS

The vulnerability of the njsfunctionframe function src/njsfunction.h in the njs interpreter of the nginx server is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2023-5768: Improper Neutralization of Input During Web Page Generation

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

PT-2023-24174 · Qualcomm · 315 5G Iot Modem Firmware +317

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing a vendor-specific Information Element IE of a reassociation response...