CVE-2023-32854

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08240132; Issue ID: ALPS08240132...

PT-2023-18297 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the Radio Interface Layer, which occurs when sending an SMS or writing an SMS to the SIM. This can potentially lead to code execution...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of boundary checking in the ril service, which may result in out-of-bounds writes...

PT-2023-24182 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to memory corruption that occurs while processing a pin reply in Bluetooth. This happens when the pin code received from the APP layer exceeds the expected size...

Hitachi Energy RTU500 Cross-site Scripting Vulnerability

Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Japan. A denial of service vulnerability exists in Hitachi Energy RTU500 series CMU Firmware, which arises from an incomplete or incorrect layout of received APDU frames, and can be exploited by an attacker to cause ...

CVE-2023-5768: Improper Neutralization of Input During Web Page Generation

A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...

Linux nft_inner.c Network Interface Buffer Overflow Privilege Escalation

The vulnerability of the nftinner.c component in the Linux operating system’s network interface layer is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

CVE-2023-2265 Improper restriction of rendered UI layers or frames could lead to clickjacking attack

An Improper Restriction of Rendered UI Layers or Frames in the Schweitzer Engineering Laboratories SEL-411L could allow an unauthenticated attacker to perform clickjacking based attacks against an authenticated and authorized user. See product Instruction Manual Appendix A dated 20230830 for more...

Imperva Successfully Mitigates Record-Breaking DDoS Attack in Retail Industry

In the dynamic world of cybersecurity, November 13, 2023, marked a significant milestone for Imperva as we successfully mitigated the largest application-layer DDoS attack we’ve ever recorded in the retail industry. The target was a prominent Indonesian eCommerce platform, known for its diverse...

DEBIAN-CVE-2023-5981

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5 padding...

What is SSL VPN?

Deciphering SSL VPN: An In-depth Perspective Pivoting our lens towards data in this digital era, akin to the transition observed during the oil boom, we've realized that the fodder for importance today is safeguarding data while it voyages through global networks. SSL VPN Secure Sockets Layer...

Meta Katran Security Vulnerability

Meta Katran is a C++ library and BPF program from Meta Corporation. It is used to build high-performance Layer 4 load-balanced forwarding planes. A security vulnerability exists in Meta Katran that stems from the ability to expose uninitialized kernel memory as part of an IP header...

django-ethereum-events (1.0.5), layer-py (>=0.0.1, <=0.0.3) +1 more potentially affected by unknown CVE via eth-abi (1.1.1)

eth-abi PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - django-ethereum-events 1.0.5 - layer-py =0.0.1, =0.4.0, =0.5.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RQR8-PXH7-CQ3G...

Elastic Beats TLS Certificate Validation

The vulnerability affects agents for data collection and delivery in Elasticsearch or Logstash Elastic Beats, agents for collecting metrics in Elastic Agent, server software for monitoring and analyzing application performance in Elastic APM Server, and server software for managing agents in...

CVE-2023-47785

Cross-Site Request Forgery CSRF vulnerability in LayerSlider plugin = 7.7.9 versions...

LTESniffer - An Open-source LTE Downlink/Uplink Eavesdropper

LTESniffer is An Open-source LTE Downlink/Uplink Eavesdropper It first decodes the Physical Downlink Control Channel PDCCH to obtain the Downlink Control Informations DCIs and Radio Network Temporary Identifiers RNTIs of all active users. Using decoded DCIs and RNTIs, LTESniffer further decodes t...

OESA-2023-1830 mariadb security update

MariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make ...

tpm2-tss security and enhancement update

2.3.2-5 - Ensure layer number is in bounds Resolves: rhbz2160302 Resolves: rhbz2162611...

PT-2023-35597 · Pcpp · Pcpp

Name of the Vulnerable Software and Affected Versions: pcpp affected versions not specified Description: The issue is related to a stack-buffer-overflow read error. It occurs in the getReferenceIdentifierString function within the NtpLayer of the pcpp library, which is called by the...

layer-client (0.3.5), sapsan (>=0.1.1, <=0.2.7) potentially affected by CVE-2023-6014 via mlflow (1.11.0)

mlflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - layer-client 0.3.5 - sapsan =0.1.1, =0.2.7 Source cves: CVE-2023-6014 Source advisory: OSV:GHSA-4QQ5-MXXX-M6GG...