Code injection

Transient DOS in WLAN Firmware while parsing no-inherit IES...

CVE-2023-33047 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while parsing no-inherit IES...

PT-2023-9354 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to a slab out-of-bounds write in the smb inherit dacl function, caused by offsets being larger than the pntsd allocation size. This can lead to unauthorized access...

PT-2023-24159 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the WLAN Firmware that occurs while parsing no-inherit IES. Recommendations: At the moment, there is no information about ...

Stored XSS in Notification and Data Management

Description Please enter a description of the vulnerability. Proof of Concept 1. Go to a survey and to Settings = Notifications and data. 2. Turn off Inherit option for Send basic notification email to: or Send basic notification email to: 3. Enter the following payload: " and Save...

PT-2023-33269 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.82 Description: A bug in the btrfs qgroup inherit function can cause a sleep from an invalid context. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2023-33386 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: A bug in the btrfs qgroup inherit function may cause issues due to sleeping from an invalid context. The actual impact and potential for attack have not been proven yet. Recommendations: Fo...

PT-2023-33182 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: A bug in the btrfs qgroup inherit function may cause issues due to sleeping from an invalid context. The actual impact and potential for attacks have not been confirmed. Recommendations: For...

PT-2024-11890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel has been resolved, specifically in the btrfs qgroup, where a sleep function was called from an invalid context in btrfs qgroup inherit. This issue was reported ...

PT-2022-33298 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue concerns a data-race around sysctl devconf inherit init net. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...

Mozilla: Cross-origin XSLT Documents would have inherited the parent's permissions

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of a cross-origin iframe referencing an XSLT document inheriting the parent domain's permissions such as microphone or camera access...

CVE-2022-33996

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...

CVE-2022-33996

Incorrect permission management in Devolutions Server before 2022.2 allows a new user with a preexisting username to inherit the permissions of that previous user...

CVE-2022-26693

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4. A plug-in may be able to inherit the application's permissions and access user data...

CVE-2022-22650

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data...

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An Access Control Error vulnerability exists in Apple macOS Big Sur prior to version 11.6.5, which stems from improper access restrictions in QuickTime Player on the system. An attacker can write a malicious plugin to exploit the...

CVE-2021-43055

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected...

OPENSUSE-SU-2021:0650-1 Security update for giflib

This update for giflib fixes the following issues: - Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. This update was imported from the SUSE:SLE-15:Update update project...

Mozilla: Secure Lock icon could have been spoofed

Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...