PT-2024-41023 · Oracle · Java Xml

Name of the Vulnerable Software and Affected Versions: Java XML affected versions not specified Description: The issue is related to a security exception in the Java XML library. A crash occurs in the DOM2TO.parse function, which is part of the com.sun.org.apache.xalan.internal.xsltc.trax package...

CVE-2024-46729 drm/amd/display: Fix incorrect size calculation for loop

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix incorrect size calculation for loop WHY feclken has size of 5 but sizeoffeclken has byte size 20 which is lager than the array size. HOW Divide byte size 20 by its element size. This fixes 2 OVERRUN issues...

Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS

Summary We discovered a DOM Clobbering vulnerability in Vite when building scripts to cjs/iife/umd output format. The DOM Clobbering gadget in the module can lead to cross-site scripting XSS in web pages where scriptless attacker-controlled HTML elements e.g., an img tag with an unsanitized name...

The vulnerability of the Ivanti EPM endpoint management software is related to an uncontrolled element in the search process. This allows a malicious individual to elevate their privileges to SYSTEM level.

The vulnerability of the Ivanti EPM endpoint management software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to increase their privileges to SYSTEM level...

Intel Raid Web Console 代码问题漏洞

Intel Raid Web Console is a web-based, Intel Corporation USA application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. Intel Raid Web Console has a code issue vulnerability that stems from the inclusion of an uncontrolled search pa...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client, due to insufficient validation of various types of elements, allowing attackers to access confidential data

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of various types of elements. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Incomplete Filtering of Special Elements

Overview AngularJS.Core is an AngularJS. package for other Angular modules within .NET. Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements. The srcset attribute in an HTML element can be a vector for content spoofing. An attacker can manipulate the conten...

CVE-2024-8373 AngularJS improper sanitization in '<source>' element

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

CVE-2024-8373 AngularJS improper sanitization in '<source>' element

Improper sanitization of the value of the srcset attribute in HTML elements in AngularJS allows attackers to bypass common image source restrictions, which can also lead to a form of Content Spoofing https://owasp.org/www-community/attacks/ContentSpoofing . This issue affects all versions of...

DEBIAN-CVE-2024-44970

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from the WQ linked list mlx5wqllpop. For SHAMPO, it is possible to receive CQEs with 0 consumed strides fo...

AZL-49875 CVE-2024-44970 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from the WQ linked list mlx5wqllpop. For SHAMPO, it is possible to receive CQEs with 0 consumed strides fo...

The vulnerability of the mmu component in the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the mmu component in the Linux operating system’s kernel is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

CVE-2024-33057

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length...

CVE-2024-33057 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

CVE-2024-33057 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

CVE-2024-23364 Buffer Over-read in WLAN Firmware

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

CVE-2024-23364

The CVE-2024-23364 issue is a Transient DoS in WLAN where processing of non-transmitted BSSID profile sub-elements in the MBSSID Information Element (IE) of OTA beacon frames can cause Denial-of-Service. Public sources indicate this vulnerability concerns Qualcomm WLAN firmware components and rel...

PT-2025-2708 · Qualcomm · Snapdragon +167

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A transient Denial of Service DOS can occur when the driver parses the per STA profile Information Element IE and attempts to access the EXTN element ID...