SUSE CVE-2023-43622

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in...

Apache HTTP Server Resource Management Error Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable, and extensible via a simple API. A resource management error vulnerability exists in Apache HTTP Server versions 2.4.55 through 2.4.57, which originates when an attacker...

CVE-2023-5654

The React Developer Tools extension registers a message listener with window.addEventListener'message', in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch. The URL is not...

libX11 Heap Buffer Overflow DoS

The vulnerability of the XCreateImage function in the client-side API library for the X Window System, libX11, is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

libX11 Heap Buffer Overflow DoS

The vulnerability of the PutSubImage function in the client-side API library for the X Window System libX11 is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

NULL Pointer Dereference

Overview Selenium.WebDriver is a .NET bindings for the Selenium WebDriver API Affected versions of this package are vulnerable to NULL Pointer Dereference due to an insufficient check on CookieWndProc function. An attacker can cause the application to crash by sending specially crafted data that...

CVE-2023-44105

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...

Design/Logic Flaw

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

Code injection

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

CVE-2023-44105

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44105

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44105

CVE-2023-44105 involves lax permission checks in the window management module of Huawei HarmonyOS/EMUI. The connected documents describe an authorization issue where permissions are not strictly verified, allowing exploitation to cause functions to operate abnormally. Affected software appears to...

CVE-2023-41304

The CVE-2023-41304 entry concerns Huawei HarmonyOS window module. The vulnerability is described as an input validation error in the window module, caused by improper parameter checks. Successful exploitation could resize an application window to that of a floating/hover window, as indicated by m...

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window...

PT-2023-29101

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns a vulnerability in the window management module where permissions are not strictly verified. This could lead to features performing...

Huawei HarmonyOS and EMUI Security Bypass Vulnerability (CNVD-2023-84322)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in Huawei...

CVE-2023-44105: Improper Privilege Management

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally...