MAL-2023-1533 Malicious code in mapsapi-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a12b68cea467324465b98ad4c7ffcddb67cac55eec195215bce156b916abbda The OpenSSF Package Analysis project identified 'mapsapi-area' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

The vulnerability of the Windows Wireless Wide Area Network Service (WwanSvc) allows a hacker to compromise the protected information.

The vulnerability of the Windows Wireless Wide Area Network Service WwanSvc operating system is related to the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2023-36905

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

Information disclosure

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

...

PT-2023-4380 · Microsoft · Windows Wireless Wide Area Network Service +1

Name of the Vulnerable Software and Affected Versions: Windows Wireless Wide Area Network Service WwanSvc affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Wireless Wide Area Network Service WwanSvc, which can allow an attack...

Microsoft Windows Wireless Networking Security Vulnerability

Microsoft Windows Wireless Networking is an application from Microsoft Corporation USA.WIFI network connectivity application. A security vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An attacker exploiting this vulnerability could gain access to sensitive...

SUSE CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

CVE-2023-38330

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack...

CVE-2023-38330

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack...

PT-2023-26365 · Oxid · Oxid Eshop Enterprise Edition

Name of the Vulnerable Software and Affected Versions: OXID eShop Enterprise Edition versions 6.5.0 through 6.5.2 Description: The issue allows uploading files with modified headers in the administration area, enabling an attacker to create a HTTP Response Splitting attack by uploading a file wit...

CVE-2023-38330

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack...

HPESBST04494 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS), Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege; Remote: Disclosure of Information, Disclosure of Sensitive Information, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Brocade 16Gb Fibre Channel SAN Switch Module for HPE Synergy -...

Kyocera Command Center RX 路径遍历漏洞

Kyocera Command Center RX is a centralized printer management tool from Kyocera, Japan. The product is mainly used to manage and monitor printers on a local area network LAN. A path traversal vulnerability exists in Kyocera Command Center RX, which can be exploited by remote attackers to obtain...

Kyocera Command Center RX 路径遍历漏洞

Kyocera Command Center RX is a centralized printer management tool from Kyocera, Japan. The product is mainly used to manage and monitor printers on a local area network LAN. A path traversal vulnerability exists in Kyocera Command Center RX, which can be exploited by remote attackers to obtain...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

kernel: tcindex: use-after-free vulnerability in traffic control index filter allows privilege escalation

A use-after-free vulnerability was found in the traffic control index filter tcindex in the Linux kernel. The imperfect hash area can be updated while packets are traversing. This issue could allow a local attacker to cause a use-after-free problem, leading to privilege escalation...

DEBIAN-CVE-2023-32637

GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through the product may execute arbitrary code on the server...