CVE-2024-32908

In secmediaprotect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from privilege bypass...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a competing condition in the secmediaprotect module of media.c, where a privilege bypass is possible...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from an incorrect state checking issue in the DA module, which may allow privilege bypass...

D-Link DIR-845 安全漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-845L v1.01KRb03 version and earlier versions, which stems from a privilege bypass vulnerability in the getcfg.php component...

Wagtail 安全漏洞

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Wagtail versions 6.0 through 6.0.2, which stems from a vulnerability that allows an attacker to bypass privilege checking via wagtail.contrib.settings, ModelViewSet...

Tolgee 安全漏洞

Tolgee is an open source multilingual translation and localization platform designed to help development teams easily manage and maintain multilingual software applications and websites. A security vulnerability exists in Tolgee version v3.57.2, which stems from a vulnerability that allows an...

Deno 安全漏洞

Deno is open source for a simple, modern and secure JavaScript and TypeScript runtime environment. It uses V8 and is built with Rust. A security vulnerability exists in versions prior to Deno 1.42.2, which stems from a race condition between an ANSI escape sequence and reading standard input,...

XWiki Platform 安全漏洞

XWiki Platform is the XWiki Foundation's suite of wiki platforms for creating collaborative Web applications. A security vulnerability exists in XWiki Platform that stems from the fact that in a multi-language wiki, any user with editing privileges can edit translations, thus circumventing the...

OpenHarmony 安全漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony prior to version v3.2.4. A remote attacker could exploit the vulnerability to bypass privilege authentication to insta...

CVE-2024-28029

Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from the presence of uninitialized data in the ppcfwinitsecpolicy method of the ppcfw.c file, which could allow for privilege bypass...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking in the aee module, which could lead to a privilege bypass issue...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking in the da module, which could lead to a privilege bypass issue...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a privilege bypass in the vdec module, which may exist...

CVE-2024-0036

CVE-2024-0036 describes a logic error in startNextMatchingActivity within Android’s ActivityTaskManagerService.java that could bypass restrictions on starting activities from the background, enabling local privilege escalation without extra execution privileges and without user interaction. The v...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a privilege bypass issue in the telephony module, which could lead to privilege escalation...

Apache Airflow 安全漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow versions prior to...

Silverstripe CMS GraphQL Server Security Vulnerability

Silverstripe CMS GraphQL Server is a tool that makes SilverStripe data available as a GraphQL representation. A security vulnerability exists in Silverstripe CMS GraphQL Server versions 4.x prior to 4.3.7 and 5.x prior to 5.1.3, which stems from the ability to bypass privilege checks...

IBM i Access Client Solutions Security Breach

IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i Access Client Solutions versions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3, which stems from improper privilege checking...