4305 matches found
The vulnerability of the `scan_unit_for_symbols` function in the `dwarf2.c` component of the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the scanunitforsymbols function in the dwarf2.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure using a specially created ELF fil...
Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23047)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow a...
GHSA-2RMR-XW8M-22Q9 Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
Impact An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This could open door for other attack vectors: client-side vulnerabilities: XSS/CSRF in the context of the trusted domain; interaction with...
mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service...
CVE-2023-28572
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
Memory corruption
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
CVE-2023-28572 Buffer Over-read in WLAN HOST
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
CVE-2023-28572 Buffer Over-read in WLAN HOST
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list...
CVE-2023-28572
CVE-2023-28572 corresponds to a memory corruption issue in Qualcomm WLAN HOST when processing the WLAN scan descriptor list. The vulnerability is referenced across multiple sources (including Red Hat’s CVE entry and the Pixel Update Bulletin), indicating it affects Qualcomm WLAN components and is...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a WLAN host memory corruption when processing a WLAN scan descriptor list...
PT-2023-21821 · Qualcomm · Snapdragon +49
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the WLAN HOST when processing the WLAN scan descriptor list. Recommendations: At the moment, there is no information about a newer version th...
Security & Malware scan by CleanTalk < 2.121 - IP Spoofing
Description This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to bypass bruteforce protection. PoC Send 5 invalid login requests and thus block the IP address. POST /wp-login.php HTTP/1.1 Host: localhost...
EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub
A new ongoing campaign dubbed EleKtra-Leak has set its eyes on exposed Amazon Web Service AWS identity and access management IAM credentials within public GitHub repositories to facilitate cryptojacking activities. "As a result of this, the threat actor associated with the campaign was able to...
The vulnerability of the HP Print and Scan Doctor for Windows diagnostic tool lies in the insufficient protection of operational data, which allows attackers to exploit their privileges.
The vulnerability of the HP Print and Scan Doctor for Windows diagnostic tool is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain increased privileges...
WordPress WP Cerber Security, Anti-spam & Malware Scan Plugin < 9.2 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cerber:wpcerbersecurity%2canti-spam%26malwarescan";...
WordPress WP Cerber Security, Anti-spam & Malware Scan Plugin < 9.3.3 Authorization Bypass Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cerber:wpcerbersecurity%2canti-spam%26malwarescan";...
Fedora 37 : xen (2023-881672fdab)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-881672fdab advisory. xenstored: A transaction conflict can crash C Xenstored XSA-440, CVE-2023-34323 x86/AMD: missing IOMMU TLB flushing XSA-442, CVE-2023-34326 Multiple...
Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison
Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier does not use a constant-time comparison when checking whether the provided and expected webhook token are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook token. As of publication o...
GHSA-8859-V9JP-CPHF Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison
Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier does not use a constant-time comparison when checking whether the provided and expected webhook token are equal. This could potentially allow attackers to use statistical methods to obtain a valid webhook token. As of publication o...