CVE-2020-11243

RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile...

CVE-2020-11243

CVE-2020-11243 affects Qualcomm closed-source components on Snapdragon platforms (Auto, Compute, Connectivity, Mobile). Technical detail: RRC sends a connection-establishment success to NAS even when the connection setup validation fails, causing a Denial of Service. The CVE is referenced in mult...

Denial Of Service (DoS)

wireshark is vulnerable to denial of service DoS. The vulnerability exists as the LTE RRC dissector could leak memory through append operations...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4297

Summary: CVE-2020-4297 affects IBM Engineering Requirements Management DOORS Next (RDNG) / DOORS Next Generation (DNG) with versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0. The issue is a cross-site scripting vulnerability in the Web UI that could allow a user to embed arbitrary JavaScript, potentially a...

CVE-2020-4281

Text indicates CVE-2020-4281 is a cross-site scripting vulnerability in IBM Engineering Requirements Management DOORS Next, affecting RDNG/DOORS Next Generation versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0. The Web UI can be manipulated to embed arbitrary JavaScript, potentially altering functionality...

CVE-2020-4281

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4295

IBM DOORS Next Generation DNG/RRC 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2020-4295

CVE-2020-4295 affects IBM DOORS Next Generation (RDNG) / DOORS Next: versions 6.0.2, 6.0.6, 6.0.6.1, and 7.0 are vulnerable to cross-site scripting in the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. The root cause is a ...

CVE-2020-4252

IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2019-4737

IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4252

IBM DOORS Next Generation (DNG/RRC) is affected by a cross-site scripting vulnerability (CVE-2020-4252) in the Web UI for multiple 6.x releases (notably 6.0.2, 6.0.6, 6.0.6.1). The underlying issue allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentia...

CVE-2019-4740

IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.6.1 (including 6.0.61) are affected by a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause is a Web UI XSS vulnerability; affected components...

CVE-2019-4740

IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2019-4746

CVE-2019-4746 affects IBM DOORS Next Generation (DNG/RRC) Web UI. According to the IBM bulletin, multiple cross-site scripting defects exist in DNG/RRC versions 6.0.2, 6.0.6, and 6.0.6.1 (and related RDNG/DNG variants), allowing an attacker to inject arbitrary JavaScript into the Web UI, potentia...

CVE-2019-4746

IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2019-4737

Summary: IBM DOORS Next Generation (DNG/RRC) vulnerable to cross-site scripting in the Web UI. Affected: DNG/RRD 6.0.2, 6.0.6, 6.0.6.1 (RDNG 6.0.2; DNG 6.0.6/6.0.6.1; RDNG 6.0.6.1). Root cause: cross-site scripting in the web interface could allow injected JavaScript in trusted sessions. Impact: ...

CVE-2019-4737

IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-9431

A memory leak was discovered in Wireshark in the LTE RRC dissector. This issue allows an attacker to trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a malformed packet trace file...