246 matches found
CVE-2023-28568
CVE-2023-28568 describes an information disclosure in the WLAN HAL when the reception status handler is invoked. Public records identify the issue within Qualcomm WLAN HAL (closed-source component); CVSS metrics indicate High confidentiality impact with local attack vector and low attack complexi...
CVE-2023-28568 Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL when reception status handler is called...
CVE-2023-28568: Buffer Over-read
Information disclosure in WLAN HAL when reception status handler is called...
PT-2023-21816 · Wlan Hal · Wlan Hal
Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue concerns an information disclosure in WLAN HAL when the reception status handler is called. Recommendations: At the moment, there is no information about a newer version that...
PT-2025-3601
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue arises when the MST topology is removed during the reception of an MST down reply or MST up request sideband message. This can cause a race condition between threads, leading to a...
PT-2023-17641 · WordPress · Buy Me A Coffee – Button/Widget Plugin
Name of the Vulnerable Software and Affected Versions: Buy Me a Coffee – Button and Widget Plugin versions up to, and including, 3.6 Description: The issue arises from insufficient sanitization and escaping on the text value set via the bmc post reception action, allowing authenticated attackers...
CLSA-2023-1686651204 kernel: Fix of 25 CVEs
cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - vt: drop old FONT ioctls CVE-2021-33656 - fbmem: Check virtual screen sizes in fbsetvar CVE-2021-33655 - fbcon: Prevent that...
Virtual Reception 路径遍历漏洞
Virtual Reception is a virtual reception solution. A security vulnerability exists in Virtual Reception win7sp1rtm.101119-1850 version 6.1.7601.1.0.65792. An attacker could exploit the vulnerability to obtain sensitive information via a specially crafted GET request...
CVE-2023-24819 RIOT-OS vulnerable to Buffer Overflow during IPHC receive
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be us...
Connect with Wallarm at RSA 2023
We’re looking forward to seeing you at this year’s RSA Conference! Don’t forget to set up a meeting with our executives, as they would love to hear more about your team’s application security needs and chat with you about how Wallarm can help. Visit Us at Booth 6585 in the North Expo Hall Wallarm...
NewStart CGSL CORE 5.05 / MAIN 5.05 : rsyslog Vulnerability (NS-SA-2023-0028)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...
Sielco Radio Link 2.06 Remote Privilege Escalation
Summary Sielco develops and produces radio links for all transmission and reception needs, thanks to innovative units and excellent performances, accompanied by a high reliability and low consumption. Description The application suffers from a privilege escalation vulnerability. A user with Read...
Virtual Reception v1.0 - Web Server Directory Traversal Vulnerability
Exploit Title: Virtual Reception v1.0 - Web Server Directory Traversal Exploit Author: Spinae Vendor Homepage: https://www.virtualreception.nl/ Version: win7sp1rtm.101119-1850 6.1.7601.1.0.65792 running on an Intel NUC5i5RY Tested on: all We discovered the web server of the Virtual Reception...
Virtual Reception 1.0 Directory Traversal
Exploit Title: Virtual Reception v1.0 - Web Server Directory Traversal Exploit Author: Spinae Vendor Homepage: https://www.virtualreception.nl/ Version: win7sp1rtm.101119-1850 6.1.7601.1.0.65792 running on an Intel NUC5i5RY Tested on: all We discovered the web server of the Virtual Reception...
Virtual Reception v1.0 - Web Server Directory Traversal
Exploit Title: Virtual Reception v1.0 - Web Server Directory Traversal Exploit Author: Spinae Vendor Homepage: https://www.virtualreception.nl/ Version: win7sp1rtm.101119-1850 6.1.7601.1.0.65792 running on an Intel NUC5i5RY Tested on: all CVE-ID: CVE-2023-25289 We discovered the web server of the...
CVE-2022-33244
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...
CVE-2022-33244 Reachable assertion in Modem
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...
CVE-2022-33244 Reachable assertion in Modem
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...
CVE-2022-33244
CVE-2022-33244: Transient Denial of Service due to a reachable assertion in the modem during MIB reception and SIB timeout. Documented impact is Availability (CVSS v3.1 base score 7.5). Exploitation status is not provided in the supplied materials. Connected sources consistently describe the issu...