9805 matches found
CVE-2021-37604
In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...
CVE-2021-37604
In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...
CVE-2021-37604
The CVE-2021-37604 entry pertains to Microchip MiWi software (v6.5 and earlier). The vulnerability arises because frame counters can be validated/updated prior to message authentication, allowing an attacker to inject messages with inflated frame counters and invalid payloads. This can cause deni...
PT-2021-21734
Name of the Vulnerable Software and Affected Versions Microchip MiWi software versions prior to 6.5 Description The issue concerns the validation of Message Integrity Check MIC bytes in the Microchip MiWi software stack. Specifically, the stack only validates two out of four MIC bytes...
CVE-2021-37604: Always-Incorrect Control Flow Implementation
In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the message authentication. With this vulnerability in place, an attacker may increment the incoming frame counter values by...
PT-2021-21733
Name of the Vulnerable Software and Affected Versions Microchip MiWi versions prior to 6.5 Description The issue allows an attacker to potentially increment incoming frame counter values by injecting messages with a sufficiently large frame counter value and invalid payload, resulting in denial o...
Issues and vulnerabilities related to multiple Qualcomm products
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. An authorization issue vulnerability exists in various...
Security Bulletin: CVE-2021-28165 In Eclipse Jetty CPU usage can reach 100% upon receiving a large invalid TLS frame.
Summary CVE-2021-28165 In Eclipse Jetty CPU usage can reach 100% upon receiving a large invalid TLS frame. Vulnerability Details CVEID: CVE-2021-28165 DESCRIPTION: Eclipse Jetty is vulnerable to a denial of service, caused by improper input valistion. By sending a specially-crafted TLS frame, a...
Linux Kernel Resource Management Vulnerability
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A resource management error vulnerability exists in the Linux kernel, which can be exploited by an attacker to trigger a denial of service and run arbitrary code by forcing the use of a freed area of...
PT-2021-3773 · Cockpit +5 · Cockpit +5
Name of the Vulnerable Software and Affected Versions: Cockpit affected versions not specified Description: The issue is related to clickjacking attacks, where a malicious website can render a page from a Cockpit server inside an iframe HTML entry. This could be exploited by a malicious website t...
in spiral-project/ihatemoney
💥 BUG clickjacking bug. 💥 STEP TO REPRODUCE I see there is no X-Frame-Options header present in response . So, it allow to load dashboard url in iframe which make clickjacking attack . Iframe will be completely hidden with opacity control so that victim dont suspect . bellow code can be used as...
Arbitrary File Deletion Vulnerability in Xiancheng Article Management System (Dynamic Edition)
Xiancheng article management system is a PHP + Mysql development of the program, the front of the DIV + CSS layout, PHP template separation technology. The main features are spider crawling statistician, unlimited classification, background multi-frame small window operation. Xiancheng article...
openSUSE 15 Security Update : jetty-minimal (openSUSE-SU-2021:2005-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2005-1 advisory. - In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a...
Espressif esp32 has an unspecified vulnerability
Espressif ESP32 is a microcontroller from China Lexin Information Technology Espressif. espressif esp32 has a security vulnerability that allows an attacker to cause a denial of service and kernel crash via a misformatted beacon csa frame...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34174
A vulnerability exists in Broadcom BCM4352 and BCM43684 chips. Any wireless router using BCM4352 and BCM43684 will be affected, such as ASUS AX6100. An attacker may cause a Denial of Service DoS to any device connected to BCM4352 or BCM43684 routers via an association or reassociation frame...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34173
An attacker can cause a Denial of Service and kernel panic in v4.2 and earlier versions of Espressif esp32 via a malformed beacon csa frame. The device requires a reboot to recover...
CVE-2021-34173
The CVE-2021-34173 entry affects Espressif ESP32 (v4.2 and earlier). The root cause is a malformed beacon CSA frame that can trigger a denial of service and kernel panic, requiring a reboot to recover. Public descriptions consistently state DoS/kernel panic without detailing patches or exploitati...