UBUNTU-CVE-2023-4921

A use-after-free vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfqdequeue due to the incorrect .peek handler of...

CVE-2023-4921 Use-after-free in Linux kernel's net/sched: sch_qfq component

A use-after-free vulnerability in the Linux kernel's net/sched: schqfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfqdequeue due to the incorrect .peek handler of...

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

Design/Logic Flaw

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

CVE-2023-36161: Uncontrolled Resource Consumption

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

Qubo Smart Plug Security Vulnerability

Qubo Smart Plug is a smart plug from Qubo. It effectively manages and tracks the energy consumption of devices through real-time power monitoring. A security vulnerability exists in the Qubo Smart Plug version 10A HSP02010114SYSTEM-10A, which stems from a vulnerability that allows an attacker to...

CVE-2023-36161

The CVE-2023-36161 entry concerns the Qubo Smart Plug 10A, specifically version HSP02_01_01_14_SYSTEM-10A. The connected documents corroborate a vulnerability that enables an attacker to cause a denial of service (DoS) through Wi‑Fi deauthentication. The risk is tied to the product’s Wi‑Fi handli...

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

PT-2023-25461 · Unknown · Qubo Smart Plug 10A

Name of the Vulnerable Software and Affected Versions: Qubo Smart Plug 10A version HSP02 01 01 14 SYSTEM-10A Description: An issue was discovered in the Qubo Smart Plug 10A, allowing attackers to cause a denial of service DoS via Wi-Fi deauthentication. Recommendations: For Qubo Smart Plug 10A...

PT-2023-5190 · Linux +9 · Linux Kernel +9

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free vulnerability in the Linux kernel's net/sched: sch qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM WebSphere Application Server traditional is vulnerable to spoofing when using Web Server Plug-ins (CVE-2022-39161)

Summary When WebSphere Application Server traditional is used with the optionally installed Web Server Plug-ins component, the lack of hostname verification with the Web Plugins could allow an authenticated attacker to conduct spoofing attacks. A man in the middle attacker could conduct an exploi...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

Design/Logic Flaw

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

PT-2023-27110 · Renault · Renault Easy Link Multimedia System

Name of the Vulnerable Software and Affected Versions: Renault Easy Link Multimedia System Software version 283C35519R Description: The issue is related to a lack of exception handling in the software, allowing attackers to cause a Denial of Service DoS by supplying crafted WMA files when...

The vulnerability of NETGEAR RAX30 network interface cards’ UPnP microprogramming service allows a hacker to execute arbitrary code.

The vulnerability of NETGEAR RAX30 microprogrammed software routing devices stems from the lack of measures taken to sanitize data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-39801: Improper Handling of Exceptional Conditions

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...