Lucene search
+L

4288 matches found

OSV
OSV
added 2023/04/19 11:15 p.m.17 views

UBUNTU-CVE-2023-2166

A null pointer dereference issue was found in can protocol in net/can/afcan.c in the Linux before Linux. mlpriv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service...

5.5CVSS6.7AI score0.002EPSS
SaveExploits0References4
Veracode
Veracode
added 2023/04/19 6:43 a.m.26 views

Denial Of Services (DoS)

Google Chrome is vulnerable to Denial Of Services DoS. The vulnerability exists due to the use after free in Frames, which allows an attacker to convince a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00968EPSS
SaveExploits0References7Affected Software2
NVD
NVD
added 2023/04/18 9:15 p.m.29 views

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

6.5CVSS6.5AI score0.00462EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/18 9:15 p.m.11 views

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

6.5CVSS5.8AI score0.00462EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/18 9:15 p.m.28 views

Design/Logic Flaw

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

4.3CVSS6.5AI score0.00462EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2023/04/18 8:6 p.m.36 views

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

6.5CVSS6.7AI score0.00462EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/18 8:6 p.m.13 views

CVE-2022-43378

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user to be tricked into performing unintended actions when external address frames are not properly restricted. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

6.5CVSS6.5AI score0.00462EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/18 8:6 p.m.62 views

CVE-2022-43378

CVE-2022-43378 affects Schneider Electric NetBotz 4 (devices 355/450/455/550/570) up to version 4.7.0 and prior. The vulnerability is CWE-1021: improper restriction of rendered UI layers or frames, which could let an attacker trick a user into performing unintended actions when external address f...

6.5CVSS6.4AI score0.00462EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/04/18 1:45 a.m.5 views

SUSE CVE-2022-47522

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

7.5CVSS7.1AI score0.00889EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/15 2:15 a.m.17 views

Authentication flaw

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

4.3CVSS7.5AI score0.00889EPSS
SaveExploits1References4
CVE
CVE
added 2023/04/15 12:0 a.m.133 views

CVE-2022-47522

CVE-2022-47522 affects Siemens SCALANCE/W-series wireless devices (e.g., W721-1, W722-1, W734-1, W738-1, W748-1, W761-1, W774-1, W778-1, W786-1/2, W788-1/2, WAM/ WUM lines) across multiple SKUs. The vulnerability concerns how IEEE 802.11 allows a physically proximate attacker to interfere with a ...

7.5CVSS6.5AI score0.00889EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/04/15 12:0 a.m.51 views

CVE-2022-47522

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

7.1AI score0.00889EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:0 a.m.44 views

Ubuntu 18.04 LTS : Chromium vulnerabilities (USN-6021-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6021-1 advisory. It was discovered that Chromium did not properly manage memory in several components. A remote attacker could possibly use this issue to corrupt memory v...

9.8CVSS8.2AI score0.03205EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2023/04/12 12:0 a.m.10 views

PT-2023-3059 · Juniper Networks · Qfx10000 Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.4R3-S10 Juniper Networks Junos OS version 20.1R1 and later versions Juniper Networks Junos OS versions prior to 20.2R3-S6 Juniper Networks Junos OS versions prior to 20.3R3-S6 Juniper Networks...

6.5CVSS6.3AI score0.00316EPSS
SaveExploits0References7
Veracode
Veracode
added 2023/04/11 6:36 p.m.36 views

Authorization Bypass

github.com/moby/moby is vulnerable to Authorization Bypass. Encrypted overlay networks accept cleartext VXLAN datagrams tagged with the VNI of the network, which allows remote attackers to arbitrary inject ethernet frames into the encrypted overlay network...

6.8CVSS7AI score0.0144EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2023/04/11 3:30 p.m.33 views

GHSA-F8VR-R385-RH5R h2 vulnerable to denial of service

Hyper is an HTTP library for Rust and h2 is an HTTP 2.0 client & server implementation for Rust. An issue was discovered in h2 v0.2.4 when processing header frames. It incorrectly processes the HTTP2 RSTSTREAM frames by not always releasing the memory immediately upon receiving the reset frame,...

7.5CVSS7.6AI score0.01121EPSS
SaveExploits1References6
OSV
OSV
added 2023/04/11 2:15 p.m.10 views

AZL-34823 CVE-2023-26964 affecting package kata-containers for versions less than 3.2.0.azl0-2

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RSTSTREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service DoS...

7.5CVSS7.1AI score0.01121EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/11 2:15 p.m.11 views

AZL-61174 CVE-2023-26964 affecting package rust for versions less than h2-0.3.26

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RSTSTREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service DoS...

7.5CVSS7.1AI score0.01121EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/11 2:15 p.m.19 views

AZL-35217 CVE-2023-26964 affecting package rpm-ostree for versions less than 2024.4-1

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RSTSTREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service DoS...

7.5CVSS7.1AI score0.01121EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/11 2:15 p.m.7 views

UBUNTU-CVE-2023-26964

An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RSTSTREAM frames. As a result, the memory and CPU usage are high which can lead to a Denial of Service DoS...

7.5CVSS5.8AI score0.01121EPSS
SaveExploits1References3
Rows per page
Query Builder