Lucene search
+L

3186 matches found

NVD
NVD
added 2024/04/08 3:15 a.m.20 views

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

4.4CVSS6.5AI score0.00084EPSS
SaveExploits0References1
OSV
OSV
added 2024/04/08 3:15 a.m.5 views

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

4.4CVSS5.9AI score0.00084EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/08 2:21 a.m.88 views

CVE-2024-23658

This CVE (CVE-2024-23658) affects UNISOC chipsets’ camera driver. The issue is a use-after-free caused by a logic error leading to memory reuse after release, with local denial of service and potential SYSTEM-level execution privileges. Documents describe the vulnerability consistently but do not...

4.4CVSS6.7AI score0.00084EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/08 2:21 a.m.14 views

CVE-2024-23658

In camera driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

6.8AI score0.00084EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/08 12:00 a.m.11 views

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that originates from a camera driver logic error that results in memory reuse after release...

4.4CVSS6.8AI score0.00084EPSS
SaveExploits0References2
Hacker One
Hacker One
added 2024/04/06 6:41 a.m.44 views

HackerOne: Any user could upload attachments to pentest scoping form they don't have access to

The root cause of this issue was insufficient access controls implemented in the attachment upload functionality for pentest scoping forms. The endpoint responsible for handling attachment uploads did not properly validate the user's access rights to the specific scoping form, allowing any...

7AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/04/05 8:15 p.m.7 views

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.1AI score0.00106EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/05 8:15 p.m.15 views

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00106EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/05 8:15 p.m.25 views

CVE-2024-29748

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS7.8AI score0.0068EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/05 8:15 p.m.3 views

CVE-2024-29748

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.9AI score0.0068EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/04/05 8:04 p.m.33 views

Logic Error

curl is vulnerable to Logic Error. The vulnerability is due to an error in the logic for removing protocols when a protocol selection parameter option disables all protocols without adding any, allows attackers to potentially bypass protocol restrictions and perform requests with disabled protoco...

3.5CVSS6.2AI score0.01681EPSS
SaveExploits1References14Affected Software1
CVE
CVE
added 2024/04/05 8:02 p.m.355 views

CVE-2024-29748

CVE-2024-29748 is an Android Pixel privilege-escalation vulnerability affecting Pixel firmware. Root cause described as a logic error allowing local escalation of privilege without extra execution privileges; exploitation requires user interaction. CVSSv3.1 base score 7.8 (HIGH) with LOCAL access...

7.8CVSS8.2AI score0.0068EPSS
SaveIn wildExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/05 8:02 p.m.29 views

CVE-2024-29748

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.3AI score0.0068EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/05 8:02 p.m.50 views

CVE-2024-29748

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

8AI score0.0068EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/05 8:02 p.m.11 views

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.8AI score0.00106EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/05 8:02 p.m.100 views

CVE-2024-29741

The CVE-2024-29741 issue affects Google Pixel’s s2mpu.c driver, specifically the pblS2mpuResume function, where a logic error enables a mitigation bypass. This could allow local elevation of privilege without additional execution privileges or user interaction. Multiple connected sources corrobor...

7.8CVSS7AI score0.00106EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/05 8:02 p.m.22 views

CVE-2024-29741

In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7AI score0.00106EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/04/05 12:00 a.m.37 views

CVE-2024-29748

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

7.8CVSS7.5AI score0.0068EPSS
SaveIn wildExploits0References2
CNNVD
CNNVD
added 2024/04/05 12:00 a.m.9 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from the presence of a logic error that has a possible way to bypass...

7.8CVSS9.5AI score0.0068EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.9 views

PT-2024-2944 · Google · Android Pixel

Name of the Vulnerable Software and Affected Versions: Android Pixel affected versions not specified Description: The issue is caused by a logic error in the code, allowing for a possible bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS8.4AI score0.0068EPSS
SaveExploits0References34
Rows per page
Query Builder