10135 matches found
PT-2024-12415 · Qualcomm · Qualcomm 7C+ Gen 3 Compute
Name of the Vulnerable Software and Affected Versions: Qualcomm 7c+ Gen 3 Compute affected versions not specified Description: The issue occurs when the WLAN firmware receives a 'reassoc response' frame that includes a RIC DATA element, leading to a transient denial of service DOS. Recommendation...
Integer Underflow (Wrap or Wraparound)
Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound due to improper handling of pushpopframerefoffset during the execution of a valid WebAssembly module. An attacker can trigger a double free, leading to a denial of service. Remediation Upgrade...
CVE-2023-52284
Bytecode Alliance wasm-micro-runtime aka WebAssembly Micro Runtime or WAMR before 1.3.0 can have an "double free or corruption" error for a valid WebAssembly module because pushpopframerefoffset is mishandled...
OnCell G3150A-LTE Security Vulnerability
Moxa OnCell G3150A-LTE is a reliable and secure LTE gateway from Moxa China. A security vulnerability exists in OnCell G3150A-LTE v1.3 and earlier versions, which stems from incorrectly restricting frame objects and could lead to an attacker tricking a user into interacting with an application...
CVE-2023-6093: Improper Restriction of Rendered UI Layers or Frames
A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the...
PT-2023-31956 · Bytecode Alliance · Wasm-Micro-Runtime
Name of the Vulnerable Software and Affected Versions: Bytecode Alliance wasm-micro-runtime versions prior to 1.3.0 Description: The issue arises from the mishandling of push pop frame ref offset, leading to a "double free or corruption" error for a valid WebAssembly module. Recommendations: For...
SUSE CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
PT-2023-8289 · Moxa · Oncell G3150A-Lte Series
Name of the Vulnerable Software and Affected Versions: OnCell G3150A-LTE Series firmware versions v1.3 and prior Description: A clickjacking vulnerability has been identified, caused by incorrectly restricting frame objects. This can lead to user confusion about which interface the user is...
DEBIAN-CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
Hitachi Energy RTU500 Series Improper Validation of Specified Index, Position, or Offset in Input (CVE-2023-5768)
A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout may cause blocking on link layer. Error reason was an endless blocking when reading incoming frames on link layer with wrong length...
kernel: IGB driver inadequate buffer size for frames larger than MTU
A flaw was found in igbconfigurerxring in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel. An overflow of the contents from a packet that is too large will overflow into the kernel's ring buffer, leading to a system integrity issue...
CVE-2023-42479
An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information...
Cross site scripting
An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information...
Netty Frame Decoding DoS
The vulnerability of the frame decoding function in the Netty network programming framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2023-28364
Name of the Vulnerable Software and Affected Versions Biller Direct affected versions not specified Description An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct...
ak-frame-extractor (>=1.0.0, <=1.3.0), ak-video-analyser (0.0.2) +31 more potentially affected by CVE-2023-49797 via pyinstaller (>=5.0.1, <=5.13.0)
pyinstaller PYPI version =5.0.1, =1.0.0, =0.2.4, =0.0.25, =0.1.0, =0.0.13, =1.0.0, =0.0.1rc1, =0.0.3 - homolab 0.9.5.3.1 and more Source cves: CVE-2023-49797 Source advisory: OSV:GHSA-9W2P-RH8C-V9G5...
ak-frame-extractor (>=1.0.0, <=1.3.0), ak-video-analyser (0.0.2) +31 more potentially affected by CVE-2023-49797 via pyinstaller (>=5.0.1, <=5.13.0)
pyinstaller PYPI version =5.0.1, =1.0.0, =0.2.4, =0.0.25, =0.1.0, =0.0.13, =1.0.0, =0.0.1rc1, =0.0.3 - homolab 0.9.5.3.1 and more Source cves: CVE-2023-49797 Source advisory: GHSA-9W2P-RH8C-V9G5...
Cross-site Scripting (XSS)
Overview Squidex.ClientLibrary is a ClientLibrary for Squidex Headless CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS due an incomplete blacklist in the SVG inspection process. An attacker can inject malicious JavaScript via the SRC attribute of an IFRAME elemen...
CLSA-2023-1701799960 Fix of 8 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb:...
