Vulnerabilities (CVE)

Information disclosure in Modem while processing SIB5.

Transient DOS in WLAN Firmware while parsing t2lm buffers.

Transient DOS in Data Modem during DTLS handshake.

Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Information disclosure in WLAN HAL when reception status handler is called.

Transient DOS in Audio while remapping channel buffer in media codec decoding.

Information Disclosure in WLAN Host when processing WMI event command.

Windows Common Log File System Driver Information Disclosure Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

Windows NFS Portmapper Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic.

An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to denial of service. An attacker can send a network request to trigger this vulnerability.

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

Transient DOS while parsing WLAN beacon or probe-response frame.

Transient DOS in WLAN Firmware while parsing FT Information Elements.

Transient DOS in WLAN Firmware while processing frames with missing header fields.

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affe ... A vulnerability in Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of certain parameters within 802.11 frames. An attacker could exploit this vulnerability by sending a wireless 802.11 association request frame with crafted parameters to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of an affected device, resulting in a DoS condition.

Show More

Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV.

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.

Transient DOS due to buffer over-read in WLAN while sending a packet to device.

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.