Mitsubishi Electric’s various products have security vulnerabilities

Mitsubishi Electric CC-Link IE TSN Remote I/O module and others are products of Mitsubishi Electric Japan.Mitsubishi Electric CC-Link IE TSN Remote I/O module is an industrial Mitsubishi Electric CC-Link IE TSN Remote I/O module is a kind of industrial network technology, Remote I/O module is use...

CVE-2025-21435 Buffer Over-read in WLAN Host Communication

Transient DOS may occur while parsing extended IE in beacon...

CVE-2025-21434 Buffer Over-read in WLAN Host

Transient DOS may occur while parsing EHT operation IE or EHT capability IE...

CVE-2025-26589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2025-26589

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2025-26589

CVE-2025-26589 concerns the WordPress plugin IE CSS3 Support (

CVE-2025-26589 WordPress IE CSS3 Support Plugin <= 2.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2025-26589: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cristopher Dino IE CSS3 Support ie-css3-support allows Reflected XSS.This issue affects IE CSS3 Support: from n/a through = 2.0.1...

CVE-2024-53027: Buffer Copy without Checking Size of Input

Transient DOS may occur while processing the country IE...

PT-2025-9472

Name of the Vulnerable Software and Affected Versions IE CSS3 Support versions from n/a through 2.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS in NotFound IE CSS3 Support...

PT-2025-9307

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A transient Denial of Service DOS may occur while processing the country Information Element IE. Recommendations At the moment, there is no information about a newer version that contains a fi...

WordPress plugin: IE CSS3 Support – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

CVE-2024-49838

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-33015

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report...

CVE-2024-49838

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-49838

CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...

CVE-2024-49838 Buffer Over-read in WLAN HOST

Information disclosure while parsing the OCI IE with invalid length...

CVE-2024-45569: Improper Validation of Array Index

Memory corruption while parsing the ML IE due to invalid frame content...

PT-2025-2868

Name of the Vulnerable Software and Affected Versions Qualcomm affected versions not specified Description The issue concerns information disclosure when parsing the OCI IE with an invalid length. This could potentially lead to sensitive data exposure. Recommendations At the moment, there is no...