PT-2023-24762

Name of the Vulnerable Software and Affected Versions Gatsby versions prior to 4.25.7 and 5.9.1 Description The Gatsby framework contains a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. Any...

CVE-2023-34238: Improper Limitation of a Pathname to a Restricted Directory

Gatsby is a free and open source framework based on React. The Gatsby framework prior to versions 4.25.7 and 5.9.1 contain a Local File Inclusion vulnerability in the file-code-frame and original-stack-frame paths, exposed when running the Gatsby develop server gatsby develop. Any file in scope o...

ABB eSOMS Clickjacking

The vulnerability of the ABB eSOMS production process management software lies in the absence of the X-Frame-Options header in HTTP responses. Exploiting this vulnerability allows a remote attacker to obtain authentication credentials and perform clickjacking attacks...

CVE-2023-21669

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21661

Transient DOS while parsing WLAN beacon or probe-response frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...

Information disclosure

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669

CVE-2023-21669 affects Qualcomm WLAN components. The root cause is a buffer over-read in the WLAN HOST when processing a DPP action frame to a peer with an invalid source address, leading to information disclosure. CVSS base metrics in available records indicate HIGH impact to confidentiality (C)...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21658 Buffer Over-Read in WLAN Firmware

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...

CVE-2023-21661: Buffer Over-read

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21669: Buffer Over-read

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

PT-2023-18330 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN HOST affected versions not specified Description: The issue involves an information disclosure in WLAN HOST when sending a DPP action frame to a peer with an invalid source address. Recommendations: At the moment, there is no information...

CVE-2023-21658: Buffer Over-read

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : nghttp2 vulnerability (USN-6142-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6142-1 advisory. Gal Goldshtein discovered that nghttp2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...

FFmpeg Use-After-Free

The vulnerability of the libavcodec/pthreadframe.c component in the FFmpeg multimedia library is related to the use of memory after it is freed during the processing of working threads by the decoder hwaccel. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Null pointer dereference

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send a crafted frame which is forwarded by the device. During encoding of the packet a NULL pointer dereference...