Android PackageInstallerService createSessionInternal Database Access

The vulnerability of the createSessionInternal function in the PackageInstallerService.java module of the Android operating system is related to the lack of encapsulation around special characters in the name of the installer when it is written to /data/system/packages.list. Exploiting this...

Improper Authorization

Evmos is vulnerable to Improper Authorization. The vulnerability is due to allowing a user to create a validator using vested tokens to deposit the self-bond...

PT-2024-7815

Name of the Vulnerable Software and Affected Versions Amiro.CMS affected versions not specified Description The issue is related to a cross-site request forgery. Exploitation of this issue may allow a remote attacker to create an administrator account. Recommendations At the moment, there is no...

CVE-2024-37159 Evmos is missing create validator check

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...

CVE-2023-6696: Missing Authorization

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check...

CVE-2023-6492: Cross-Site Request Forgery (CSRF)

The Simple Sitemap – Create a Responsive HTML Sitemap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.13. This is due to missing or incorrect nonce validation in the 'adminnotices' hook found in class-settings.php. This makes it possible...

kernel: net/mlx5e: fix a potential double-free in fs_any_create_groups

A double-free flaw was found in the Linux kernel ConnectX-4 and Connect-IB cards in the Mellanox driver. This issue could allow a local user to crash the system...

Fedora: Security Advisory for rust-uu_link (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

evmos allows transferring unvested tokens after delegations

Impact This advisory has been created to address the following vulnerabilities found in the Evmos codebase and affecting vesting accounts. Wrong spendable balance computation The spendable balance is not updated properly when delegating vested tokens. The following example help in describing the...

GHSA-PXV8-QHRH-JC7V evmos allows transferring unvested tokens after delegations

Impact This advisory has been created to address the following vulnerabilities found in the Evmos codebase and affecting vesting accounts. Wrong spendable balance computation The spendable balance is not updated properly when delegating vested tokens. The following example help in describing the...

PT-2024-40791

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the QUICVariableInt::size function, which is called by...

PT-2024-27343

Name of the Vulnerable Software and Affected Versions Evmos versions prior to 18.0.0 Description The issue concerns the Evmos codebase, specifically affecting vesting accounts. It involves three main problems: wrong spendable balance computation, missing precompile checks, and missing create...

PT-2024-30695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the v4l2 async create ancillary links function. This function creates ancillary links for lens and...

PT-2024-29155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a tainted pointer delete in the case of region creation failure in the ipc devlink create region function. When region creation fails, the delete process for...

PT-2024-29157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the deletion of tainted pointers in the Linux kernel, specifically in the mlx5 lag create port sel table function when flow rule creation fails. Instead of deleti...

PT-2024-29745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential deadlock in the create pinctrl function when handling -EPROBE DEFER. In create pinctrl, pinctrl maps mutex is acquired before calling add setting. If...

freerdp:TestFuzzCoreClient: Heap-buffer-overflow in gcc_read_server_data_blocks

Project: https://github.com/FreeRDP/FreeRDP.git Detailed Report: https://oss-fuzz.com/testcase?key=6200833682243584 Project: freerdp Fuzzing Engine: honggfuzz Fuzz Target: TestFuzzCoreClient Job Type: honggfuzzasanfreerdp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

[SECURITY] Fedora 39 Update: rust-uu_mkdir-0.0.23-3.fc39

mkdir uutils create DIRECTORY...

CVE-2024-2506: Improper Neutralization of Input During Web Page Generation

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS functionality in all versions up to, and including, 4.2.7 due to insufficient input sanitization and output escaping on user supplied...

PT-2024-9773

Name of the Vulnerable Software and Affected Versions: Linux kernel version 6.9.3 Description: The vulnerability is related to the vmxnet3 component of the Linux kernel. When the vmxnet3 rq create function fails to allocate memory for rq-data ring.base, the subsequent call to vmxnet3 rq destroy a...