17066 matches found
CVE-2023-6507
An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the extragroups= parameter with an empty list as a value ie extragroups= the logic regressed to not call setgroups0, NULL before...
CVE-2023-6507 Groups not dropped before running subprocess when using empty 'extra_groups' parameter
An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the extragroups= parameter with an empty list as a value ie extragroups= the logic regressed to not call setgroups0, NULL before...
CVE-2023-6507 Groups not dropped before running subprocess when using empty 'extra_groups' parameter
An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the extragroups= parameter with an empty list as a value ie extragroups= the logic regressed to not call setgroups0, NULL before...
Wrapping ether with Ocean.doMultipleInteractions() reverts
Lines of code Vulnerability details Summary Wrapping ether with doMultipleInteractions reverts. This is the case if one or more of the interactions is handling ether. If we look at the internal helper function, doMultipleInteractions, it includes the following: if msg.value != 0...
Google Pixel Buffer Error Vulnerability
Google Pixel is a smartphone from Google Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing boundary check issue in Init of protocolcalladapter.cpp, which may result in out-of-bounds reads...
Sql injection
In the module "Product Tag Icons Pro" ticons before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection...
CVE-2023-33107
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP...
Memory corruption
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
Memory corruption
Memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33107 Integer Overflow or Wraparound in Graphics Linux
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
CVE-2023-33107 Integer Overflow or Wraparound in Graphics Linux
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
CVE-2023-33063 Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33063 Use After Free in DSP Services
Memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33063
CVE-2023-33063 is a Use-After-Free/memory corruption issue in Qualcomm DSP Services triggered by a remote call from HLOS to DSP. Affected: Qualcomm chipsets with DSP Services; root cause: memory corruption leading to potential unintended behavior. Documents indicate high impact (confidentiality, ...
CVE-2023-33107: Integer Overflow or Wraparound
Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call...
VulnCheck KEV: CVE-2023-33063
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP...
CVE-2023-33063
Memory corruption in DSP Services during a remote call from HLOS to DSP. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Qualcomm Multiple Chipsets Use-After-Free Vulnerability
Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP...