8415 matches found
Design/Logic Flaw
Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...
CVE-2023-3497
Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...
CVE-2023-3497
CVE-2023-3497 affects Google Chrome on ChromeOS with the Google Security Processor firmware (Titan C). The issue is an out-of-bounds read in the firmware that enables a local attacker with physical access to cause a denial of service. The vulnerability is documented in ChromeOS-related advisories...
PT-2023-3752
Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 114.0.5735.90 Description The issue is related to an out of bounds read in the Google Security Processor firmware, which can be exploited by a local attacker to perform a denial of service via...
CVE-2023-3497: Out-of-bounds Read
Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. Chromium security severity: Medium...
CVE-2023-1206
A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6...
Ubuntu: Security Advisory (USN-6193-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Bluetooth Technology Privilege Escalation
The vulnerability of the Bluetooth technology implementation in Android devices based on MediaTek MT8167, MT8175, and MT8183 operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2023-21138
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for...
CVE-2023-21138
In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input validation. This could lead to local escalation of privilege and background activity launches with User execution privileges needed. User interaction is not needed for...
Google Android Input Verification Vulnerability
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which can be exploited by an attacker to elevate privileges due to incorrect input validation in onNullBinding of CallRedirectionProcessor.java...
CVE-2023-30082
A denial of service attack might be launched against the server if an unusually lengthy password more than 10000000 characters is supplied using the osTicket application. This can cause the website to go down or stop responding. When a long password is entered, this procedure will consume all...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. A vulnerability exists in .NET when processing malicious X.509 client certificates that may consume excessive CPU. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. A vulnerability exists in .NET when processing malicious X.509 client certificates that may consume excessive CPU. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...
PT-2023-22528 · Osticket · Osticket
Name of the Vulnerable Software and Affected Versions: osTicket affected versions not specified Description: A denial of service attack might be launched against the server if an unusually lengthy password more than 10000000 characters is supplied using the osTicket application. This can cause th...
PT-2023-18320 · Qualcomm · Snapdragon +131
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in audio when the ADSP sends input during a record use case. No additional details are provided about the estimated...
PT-2023-18331 · Qualcomm · 315 5G Iot Modem Firmware +155
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the GPU subsystem. This corruption occurs due to arbitrary command execution from the GPU when it is operating i...
golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
A flaw was found in Golang Go, where it is vulnerable to a denial of service caused by an issue during multipart form parsing. By sending a specially crafted input, a remote attacker can consume large amounts of CPU and memory, resulting in a denial of service...
GHSA-7XPV-4PM9-XCH2 mx-chain-go does not treat invalid transaction with wrong username correctly
Impact Metachain cannot process a cross-shard miniblock. An invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor. This is strictly a processing issue that could have happened on MultiversX chain. If an error like this had occurre...
mx-chain-go does not treat invalid transaction with wrong username correctly
Impact Metachain cannot process a cross-shard miniblock. An invalid transaction with the wrong username on metachain is not treated correctly on the metachain transaction processor. This is strictly a processing issue that could have happened on MultiversX chain. If an error like this had occurre...