CVE-2024-23352

Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA...

CVE-2024-23358

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in Modem...

CVE-2024-23385

Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...

CVE-2024-23363

Transient DOS while processing an improperly formatted Fine Time Measurement FTM management frame...

CVE-2024-23364

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

CVE-2024-45558

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length...

CVE-2024-33063

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

CVE-2024-33014

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33070

Transient DOS while parsing ESP IE from beacon/probe response frame...

CVE-2024-33012

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon...

CVE-2024-33057

Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location...

CVE-2024-33013

Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length...

CVE-2024-33015

Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report...

CVE-2024-33051

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length...

CVE-2024-8277

The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login function and not properly verifying the user's identit...

CVE-2024-38404

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

CVE-2024-38404

CVE-2024-38404 describes a transient DoS in Qualcomm modem components triggered when a registration-accept OTA contains incorrect ciphering key data. The issue is documented across multiple feeds (NVD/NCSC/Red Hat summaries) with the same description. Connected sources indicate impact on Qualcomm...

CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

CVE-2024-11851

The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the nitropackrmlnotification function in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber access or higher...

CVE-2024-11851 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update

The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the nitropackrmlnotification function in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber access or higher...