An issue was discovered in FRRouting FRR through 9.0.1. A crash can occur when processing a crafted BGP UPDATE message with a MP_UNREACH_NLRI attribute and additional NLRI data (that lacks mandatory path attributes).

...

CVE-2023-39048

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.ekimaemc. An attacker could exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.honten. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. Line suffers from a security vulnerability that stems from a vulnerability in Gyouza-newhushimi. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Hattoriya. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

Design/Logic Flaw

Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame counters, which are frequently broadcast by the infrastructure in an unauthenticated manner. An active adversary can manipulate the view of...

CVE-2023-39731

The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messages...

The vulnerability in the implementation of the Level 2 tunneling protocol for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Layer 2 tunneling protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted message to the Remote...

CVE-2023-26238

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe...

CVE-2023-26238

An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe...

CVE-2023-26236

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe...

Privilege escalation

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGuard EPDR processes, it is possible to perform a Local Privilege Escalation on Windows by sending a crafted message to a named pipe...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

USN-6374-1 mutt vulnerabilities

It was discovered that Mutt incorrectly handled certain email header contents. If a user were tricked into opening a specially crafted message, a remote attacker could possibly use this issue to cause a denial of service. CVE-2023-4874, CVE-2023-4875...

CVE-2023-4875

Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...

Null pointer dereference

Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...

CVE-2023-4875 Undefined Behavior for Input to API in Mutt

Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 2.2.12...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...

CVE-2023-32560

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1...