Siemens ModelSim和Questa 代码问题漏洞

Questa and ModelSim simulators are used worldwide for simulating, debugging and verifying integrated circuit designs, among other things. An uncontrolled search path element vulnerability exists in Siemens Questa and ModelSim, which can be exploited by an authenticated, local attacker to inject...

Siemens Questa and ModelSim

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2024-33049

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame...

CVE-2024-33049 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame...

CVE-2024-33049 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame...

CVE-2024-33049

CVE-2024-33049 is a Qualcomm WLAN vulnerability described as a transient Denial of Service caused by a buffer over-read when parsing a noninheritance IE of an Extension element in a beacon frame with IE length 2. Public sources classify the issue as a WLAN-related vulnerability with High severity...

VulnCheck KEV: CVE-2024-7679

In Progress Telerik UI for WinForms versions prior to 2024 Q3 2024.3.924, a command injection attack is possible through improper neutralization of hyperlink elements...

PT-2024-25108 · Qualcomm · Snapdragon +3

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: A transient Denial of Service DOS issue can occur when parsing the ESP Information Element IE from a beacon or probe response frame. This issue...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the uncontrolled element of the search path, which allows attackers to exploit their privileges.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2024-25091 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient denial of service DOS that occurs while parsing a noninheritance IE of an Extension element in a beacon frame. This happens when the length of the IE is 2...

PT-2024-25110 · Qualcomm · Snapdragon +147

Name of the Vulnerable Software and Affected Versions: No specific software or affected versions are mentioned in the provided descriptions. Description: There is an information disclosure issue when parsing the BSS parameter change count or MLD capabilities fields of the ML IE. This issue arises...

PT-2024-25109 · Qualcomm · Snapdragon +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A temporary denial of service might occur when parsing the MBSSID Information Element IE in beacons if the IE length is zero. This issue is related to t...

CVE-2024-45246

CVE-2024-45246 concerns Diebold Nixdorf Vynamic View Console with an Uncontrolled Search Path Element (CWE-427). Public sources indicate affected versions are prior to 5.9.5 (CNNVD) and that the issue could enable arbitrary code execution and privilege escalation. The CNNVD description additional...

CVE-2024-45246 Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element

Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element...

PT-2024-31503 · Diebold Nixdorf · Diebold Nixdorf

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf affected versions not specified Description: The issue concerns an Uncontrolled Search Path Element, which is a type of security weakness. This weakness can potentially be exploited to execute malicious code or escalate...

CVE-2024-47392

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through = 5.7.5...

CVE-2024-47392

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5...

CVE-2024-47392

The CVE-2024-47392 entry documents a Stored Cross-Site Scripting vulnerability in BdThemes Element Pack Elementor Addons (up to version 5.7.5). The root cause is improper neutralization of input during web page generation, enabling XSS via the affected addon. The issue affects Elementor Addons in...

CVE-2024-47392 WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.7.5...

CVE-2024-47392 WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through = 5.7.5...