CVE-2023-43556

CVE-2023-43556 describes memory corruption in the Hypervisor when platform information is not aligned. The available connected documents corroborate this vulnerability across multiple sources (NVD, Red Hat CVE entry, CVE list, Vuln Enrichment) with the same description. The materials do not speci...

CVE-2023-43555

Technical details (affected product, versions, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

CVE-2023-43551

The CVE-2023-43551 entry is confirmed in connected sources as a cryptographic/authentication issue occurring during LTE attach, where a rogue base station can skip the authentication phase and immediately issue the Security Mode Command. The vulnerability is attributed to Qualcomm closed‑source c...

CVE-2023-43545

CVE-2023-43545 corresponds to a memory corruption issue in WLAN host code triggered when the user space sends an excessive number of scan frequency entries or channels. Multiple connected documents identify this as a WLAN-related vulnerability (Qualcomm components table shows CVE-2023-43545 under...

CVE-2023-43544

CVE-2023-43544 is a memory corruption/Use-After-Free issue described as occurring when an IPC callback handle is used after it has been released during a register callback by another thread. Public references indicate this vulnerability is associated with Qualcomm Audio components and a Red Hat a...

CVE-2023-43543

CVE-2023-43543 affects Qualcomm audio components; a memory corruption can occur during playback/recording due to a race between allocation and deallocation of the graph object. Available documents identify this as a memory corruption in Audio with a race condition; no exploit details are provided...

CVE-2023-43542

CVE-2023-43542 describes a memory corruption in the Trusted Execution Environment from copying a keyblob’s material when the key material size isn’t properly checked. Documented details indicate a high-severity impact (C/H/I/H/A/H) with local attacker access and no user interaction required, per ...

CVE-2023-43538

CVE-2023-43538 corresponds to a memory corruption issue in TZ Secure OS during the initialization of the Tunnel Invoke Manager. Affected component: TZ Secure OS (closed‑source Qualcomm components are implicated in related advisories). Impact per connected docs: high/critical severity with local a...

CVE-2023-43537

CVE-2023-43537 is an information-disclosure issue in Qualcomm/WLAN host handling of T2LM Action Frame. Connected sources confirm affected area is WLAN stack (Qualcomm components) and reference public advisories (Red Hat CVE page, CVE listings, and Qualcomm bulletin). The descriptions identify inf...

CVE-2024-35633

CVE-2024-35633 is a Server-Side Request Forgery (SSRF) vulnerability in CreativeThemes Blocksy Companion for WordPress, affecting Blocksy Companion versions up to 2.0.42. The affected condition requires Administrator-level access; the issue is exploitable via network-based vectors and impacts con...

CVE-2024-35635

CVE-2024-35635 is a Server-Side Request Forgery (SSRF) vulnerability in Ninja Tables by WPManageNinja LLC, affecting Ninja Tables versions up to and including 5.0.9. The issue has been fixed in version 5.0.10. Public sources (Patchstack) identify the affected plugin as vulnerable to SSRF with a l...

CVE-2024-23665

CVE-2024-23665 : FortiWeb contains multiple improper authorization vulnerabilities (CWE-285) that allow an authenticated attacker to perform unauthorized ADOM operations via crafted requests. Affected FortiWeb versions are 7.4.2 and below, 7.2.7 and below, 7.0.10 and below, 6.4.3 and below, and 6...

CVE-2024-23664

Fortinet FortiAuthenticator contains an open redirect (untrusted URL redirection) affecting FortiAuthenticator v6.6.0 and older (v6.5.3 and below; v6.4.9 and below). An attacker can lure users to an arbitrary site via a crafted URL. Public references confirm an open redirect issue in FortiAuthent...

CVE-2024-23667

Fortinet FortiWebManager is affected by CVE-2024-23667 due to improper authorization that allows an attacker to execute unauthorized code or commands via HTTP requests or CLI. Affected FortiWebManager versions include 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; and 7.2.0. CVSS metrics indicate high i...

CVE-2024-23668

Fortinet FortiWebManager is affected by CVE-2024-23668 due to improper authorization in the HTTP Request Handler. Affected versions: 6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0. Exploitation via HTTP requests or CLI could allow executing unauthorized code or commands. Remediation: upgrade to th...

CVE-2024-23670

CVE-2024-23670 describes an improper authorization in Fortinet FortiWebManager affecting multiple versions (6.0.2; 6.2.3–6.2.4; 6.3.0; 7.0.0–7.0.4; 7.2.0). The underlying issue is an authorization weakness that allows an attacker to execute unauthorized code or commands via HTTP requests or the C...

CVE-2024-5404

The CVE-2024-5404 vulnerability affects the moneo appliance, where an unauthenticated remote attacker can change the admin password due to a weak password recovery mechanism. The issue is documented with a HIGH/CRITICAL impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and indicates total i...

CVE-2024-35637

CVE-2024-35637 affects the WordPress Church Admin plugin (versions n/a–4.3.6). It is a Server-Side Request Forgery (SSRF) vulnerability requiring Administrator access. The vulnerability is mitigated in version 4.4.0; CVSS 3.1 base score reported as 4.4 (Low). No exploitation or in‑the‑wild detail...

CVE-2024-35638

CVE-2024-35638 corresponds to the WordPress ActiveDEMAND plugin (versions <= 0.2.43). According to Patchstack, it is a CSRF vulnerability that can be triggered without authentication; impact is described as low severity (CVSS 4.3). The issue is fixed in version 0.2.44. This CVE entry is active...

CVE-2024-35639

CVE-2024-35639 affects the WordPress plugin Simple Spoiler (Webliberty) up to version 1.2. The vulnerability is a stored XSS via admin/settings context, enabling injected scripts in pages viewed by users. Severity is cited as low (CVSS 3.1/3.1: 5.9), and exploitation is described as unlikely. The...