38 matches found
CVE-2023-20633
CVE-2023-20633 describes a potential out-of-bounds write in the usb module due to a missing bounds check, enabling local escalation of privileges with SYSTEM level execution and no user interaction required. The vulnerability is described consistently across multiple sources and references patch ...
WordPress Plugin 'GDPR Cookie Consent' < 1.8.3 Multiple Vulnerabilities (CVE-2020-20633)
The WordPress application running on the remote host has a version of the 'GDPR Cookie Consent' plugin that is prior to 1.8.3. It is, therefore, affected by authenticated stored XSS and privilege escalation. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2021-20633
creationtimestamp| type| source ---|---|--- 2021-03-18 06:36:40+00:00| seen| https://t.me/cibsecurity/25066...
CVE-2021-20633
Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors...
CVE-2021-20633
CVE-2021-20633 affects Cybozu Office Cabinet. An improper access control vulnerability allows authenticated users to bypass viewing restrictions and obtain Cabinet data via unspecified vectors in Cybozu Office versions 10.0.0–10.8.4. The issue is a cross-product access-control bypass (CWE-264 sty...
CVE-2020-20633
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
CVE-2020-20633
CVE-2020-20633 affects the WordPress plugin GDPR Cookie Consent (cookie-law-info) versions 1.8.2 and earlier, via ajax_policy_generator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php. The vulnerability allows authenticated stored XSS and privilege escalation. The co...
CVE-2020-20633
ajaxpolicygenerator in admin/modules/cli-policy-generator/classes/class-policy-generator-ajax.php in GDPR Cookie Consent cookie-law-info 1.8.2 and below plugin for WordPress, allows authenticated stored XSS and privilege escalation...
CVE-2019-20633
GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...
CVE-2019-20633
creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2019-20633 vulnerabilities
Vulnerabilities for packages: patch...
CVE-2019-20633 vulnerabilities
Vulnerabilities for packages: patch...
CVE-2019-20633
GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...
CVE-2019-20633
CVE-2019-20633 affects GNU patch up to version 2.7.6. The vulnerability is a use-after-free in the function pch.c (another_hunk) caused by a faulty memory free (free(p_line[p_end])), which can enable denial of service via a crafted patch file. The issue is noted as stemming from an incomplete fix...
CVE-2019-20633
GNU patch through 2.7.6 contains a freeplinepend Double Free vulnerability in the function anotherhunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952...
WordPress GDPR Cookie Consent Plugin < 1.8.3 Multiple Vulnerabilities
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2018-20633
PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery CSRF via the Edit Profile feature...
CVE-2018-20633
CVE-2018-20633 affects PHP Scripts Mall Advance B2B Script 2.1.4, with a Cross-Site Request Forgery (CSRF) vulnerability exposed via the Edit Profile feature. The connected records consistently identify the vulnerable component as the Advance B2B Script 2.1.4 and describe the issue as CSRF via Ed...