CVE-2023-38461

The CVE-2023-38461 entry concerns vowifiservice with a missing permission check, leading to local denial of service without extra privileges. Affected component: vowifiservice (on UNISOC-derived platforms as reflected in multiple sources). Root cause: insufficient authorization checks in the serv...

CVE-2022-38461

The CVE-2022-38461 entry affects the WPML Multilingual CMS premium plugin for WordPress (versions

CVE-2022-38461 WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerability

Broken Access Control vulnerability in WPML Multilingual CMS premium plugin = 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings selected language for legacy widgets, the default behavior for media content...

CVE-2021-38461

creationtimestamp| type| source ---|---|--- 2021-10-22 16:39:13+00:00| seen| https://t.me/cibsecurity/31016...

CVE-2021-38461

CVE-2021-38461 concerns AUVESY Versiondog where a hard-coded blowfish key is used for encryption/decryption. The key can be extracted from binaries, enabling potential compromise of encrypted data. The CVE is documented across multiple sources (NVD entry and CVE lists) with a high severity in CVS...

CVE-2021-38461 AUVESY Versiondog

The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries...