CVE-2020-24944

Picoquic (before 2020-07-03) contains a denial-of-service vulnerability where a crafted QUIC frame triggers an infinite loop. The issue is tied to the decode logic in picoquic_decode_frames and picoquic_decode_stream_frame when epoch==3. The confirmed impact is partial availability (per CVSSv2/v3...

OSV-2021-315 Global-buffer-overflow in Gfx::decode_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30507 Crash type: Global-buffer-overflow READ 4 Crash state: Gfx::decodeframe Gfx::GIFImageDecoderPlugin::frame Gfx::GIFImageDecoderPlugin::bitmap...

PT-2021-28060

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow READ 4. The crash state involves functions such as Gfx::decode frame,...

Private Octopus picoquic Input Validation Error Vulnerability

Private Octopus picoquic is a management system of the Private Octopus organization in the United States. Provides feedback on the development of the QUIC standard in the IETF QUIC WG. An input validation error vulnerability exists in Private Octopus picoquic, which stems from allowing an attacke...

CVE-2020-24944: Loop with Unreachable Exit Condition

picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...

PT-2021-11091

Name of the Vulnerable Software and Affected Versions: picoquic versions prior to July 3, 2020 Description: The issue allows attackers to cause a denial of service, resulting in an infinite loop, via a crafted QUIC frame. This is related to the picoquic decode frames and picoquic decode stream...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

Design/Logic Flaw

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

CVE-2021-26711

CVE-2021-26711: A frame-injection vulnerability in the online help of Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter. This is confirmed by multiple connected records referencing the same ...

PT-2021-28045

Name of the Vulnerable Software and Affected Versions blosc versions affected versions not specified Description The issue is related to a crash caused by a memcpy parameter overlap. Technical details include the crash type being Memcpy-param-overlap, and the crash state involves functions such a...

PT-2021-17105

Name of the Vulnerable Software and Affected Versions Redwood Report2Web versions 4.3.4.5 through 4.5.3 Description A frame-injection issue in the online help of Redwood Report2Web allows remote attackers to render an external resource inside a frame via the "help/Online Help/NetHelp/default.htm"...

CVE-2021-26711: Externally Controlled Reference to a Resource in Another Sphere

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/OnlineHelp/NetHelp/default.htm turl parameter...

Qualcomm WLAN HOST Security Vulnerability

Qualcomm WLAN HOST is a Qualcomm Incorporated USA wireless LAN component used in Qualcomm products. A security vulnerability exists in the Qualcomm WLAN HOST that stems from improper checking of logical subtypes, resulting in too many frames being discarded...

Qualcomm WLAN HOST Resource Management Error Vulnerability

Qualcomm WLAN HOST is a Qualcomm Incorporated USA wireless LAN component used in Qualcomm products. A resource management error vulnerability exists in the Qualcomm WLAN HOST, which arises from the possibility that an entry in the hash table could be deleted before a frame is placed in the PE que...

CentOS 8 : firefox (CESA-2020:3557)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:3557 advisory. - Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer CVE-2020-12422 - Mozilla: WebRTC permission prompt could have been bypassed by a...

PT-2021-28032

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves functions such as blosc getitem, get coffset,...

CentOS 8 : kernel (CESA-2019:2703)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2703 advisory. - kernel: Use-after-free in sound/usb/card.c:usbaudioprobe CVE-2018-19824 - kernel: Count overflow in FUSE request leading to use-after-free issues...