CVE-2023-41337

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is configured to listen to multiple addresses or ports with each of them using different backend servers managed by multiple entities, a malicious backend entity that also has the...

CVE-2023-35642

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35642

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Denial of service

Internet Connection Sharing ICS Denial of Service Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2023-35642 Internet Connection Sharing (ICS) Denial of Service Vulnerability

...

CVE-2023-35641 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

...

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

Input validation

quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation RFC 9000 Section 8.2 requires that the recipient of a PATHCHALLENGE frame responds by sending a PATHRESPONSE. ...

CVE-2023-6193 Unbounded queuing of path validation messages in cloudflare-quiche

quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation RFC 9000 Section 8.2 requires that the recipient of a PATHCHALLENGE frame responds by sending a PATHRESPONSE. ...

CVE-2023-49692

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V7.2.2,...

Command injection

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V7.2.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V7.2.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V7.2.2, SCALANCE M812-1 ADSL-Router Annex A 6GK5812-1AA00-2AA2 All versions...