CVE-2023-6111 Use-after-free in Linux kernel's netfilter: nf_tables component

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...

CVE-2023-6111

A use-after-free vulnerability in the Linux kernel's netfilter: nftables component can be exploited to achieve local privilege escalation. The function nfttransgccatchall did not remove the catchall set element from the catchalllist when the argument sync is true, making it possible to free a...

PT-2023-24529

Name of the Vulnerable Software and Affected Versions IntelR NUC P14E Laptop Element Audio Install Package software versions prior to 156 for Windows Description The issue concerns path transversal in the IntelR NUC P14E Laptop Element Audio Install Package software, which may allow an...

Intel® NUC Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC BIOS firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-34301Non-Intel issued Description:...

CVE-2023-28740: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33878: DEPRECATED: Often Misused: Path Manipulation

Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-29740

Name of the Vulnerable Software and Affected Versions GibbonEdu Gibbon version 25.0.0 Description The issue allows HTML Injection via an IFRAME element to the Messager component. This can potentially lead to malicious code execution. Recommendations For GibbonEdu Gibbon version 25.0.0, consider...

jQuery XSS

The vulnerability of the jQuery library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute cross-site scripting using the element...

Huawei EulerOS: Security Advisory for postgresql (EulerOS-SA-2023-3146)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-6012

An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remote attacker to exploit the checkbox element and perform remote code execution, compromising the entire infrastructure...

CVE-2023-6012

An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remote attacker to exploit the checkbox element and perform remote code execution, compromising the entire infrastructure...

CVE-2023-6012 Incorrect input data validation in Lanaccess ONSAFE MonitorHM Web Console

An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remote attacker to exploit the checkbox element and perform remote code execution, compromising the entire infrastructure...

CVE-2023-6012: Improper Input Validation

An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remote attacker to exploit the checkbox element and perform remote code execution, compromising the entire infrastructure...

PT-2023-30179 · Squidex · Squidex

Name of the Vulnerable Software and Affected Versions: Squidex affected versions not specified Description: A stored Cross-Site Scripting XSS vulnerability in Squidex enables privilege escalation of authenticated users. The vulnerability is due to an insufficient SVG element filtering mechanism,...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a transient denial of service in the WLAN firmware when the firmware receives beacons including the T2LM IE...

PT-2023-24163 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Firmware. It occurs when the firmware receives a beacon that includes a T2LM Information Element IE. There is no...

Rocky Linux 8 : go-toolset:rhel8 (RLSA-2022:1819)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1819 advisory. - Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm...

CVE-2023-31016: Uncontrolled Search Path Element

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering...

Google Android elevation of privilege vulnerability (CNVD-2023-96688)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from an integer overflow in Secure Element, and can be exploited by an attacker to cause an elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2023-96681)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from an integer overflow in the Security Element API, which can be exploited by an attacker to cause an elevation of privilege...