CVE-2018-9403

The Google Pixel smartphone is susceptible to a stack buffer overflow vulnerability in the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler located within flp2hal_interface.c. This issue is caused by a missing bounds check , which could allow an attacker to achieve local escalation of privilege in a ...

CVE-2018-9395

A possible out-of-bounds (OOB) write exists in the Mediatek WLAN driver due to a missing bounds check in the mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config functions within drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. This vulnerability could ...

CVE-2018-9392

A vulnerability exists in the GPS HAL of MediaTek components, specifically within the get_binary function of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c. The issue is caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could ...

CVE-2018-9430

CVE-2018-9430 is an out-of-bounds write in btif_storage.cc (prop2cfg) that can lead to remote code execution without user interaction. Affected: Android Pixel/Nexus devices; root cause described as incorrect bounds check triggering a write beyond limits. Impact: high (RCE), network attack vector ...

CVE-2023-0163

Mozilla Convict, a configuration management library for Node.js, is vulnerable to a Prototype Pollution vulnerability (CWE-1321 ) in versions before 6.2.4 . An attacker can inject attributes into other components or override existing attributes with incompatible types, potentially leading to a cr...

CVE-2022-43936

CVE-2022-43936 affects Brocade SANnav before v2.2.2. The root cause is that enabling debugging causes Fabric OS switch passwords to be logged, risking disclosure of sensitive credentials. Impact is limited to password exposure via logs; no other compromises described. Remediation: upgrade to v2.2...

CVE-2024-9653 Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 - Reflected Cross-Site Scripting

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-9653

Restaurant Menu – Food Ordering System – Table Reservation (WordPress)

CVE-2024-9653: Improper Neutralization of Input During Web Page Generation

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2018-9371

A vulnerability exists in the Mediatek Preloader bootloader component used in Google Android devices. The root cause is an exposed interface that permits arbitrary peripheral memory mapping due to insufficient blacklisting or whitelisting. This flaw results in out-of-bounds reads and writes , whi...

CVE-2018-9364

CVE-2018-9364 corresponds to an Elevation of Privilege in the LG LGLAF bootloader component. The connected sources indicate the issue involves a special command that permitted modification of certain partitions, enabling bypass of secure boot. The Red Hat and Android bulletin entries corroborate ...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions = 2.4.2 Fixed in 2.4.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9653 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a resource flag reservation in walksystemramresrev...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a VM dma-resv lock release on xesyncinfenceget failure. No detailed vulnerability details are provided at th...

CVE-2023-20125

Cisco BroadWorks Network Server TCP Denial of Service vulnerability (CVE-2023-20125) arises from missing rate limiting for certain inbound TCP connections, allowing unauthenticated remote attackers to exhaust server resources and render the system unusable. Affected component is the local interfa...

CVE-2021-3902

CVE-2021-3902 describes an XXE flaw in dompdf/dompdf's SVG parser (improper restriction of external entities) that enables SSRF and PHAR deserialization attacks. Affected: dompdf/dompdf prior to version 2.0.0. Exploitation possible even when isRemoteEnabled is false. Consequences include SSRF, di...

CVE-2022-2232

CVE-2022-2232 concerns a LDAP injection in Keycloak’s username lookup, allowing bypass and potentially other actions. Affected: Keycloak package; root cause: LDAP injection during username lookup. Impact: high confidentiality risk; no user interaction required, network vector, privileges not requ...

kernel: iommu: Don't reserve 0-length IOVA region

A flaw was found in the Linux kernel. When the bootloader/firmware does not set up the framebuffers, the address and size are 0 in the "iommu-addresses" property. If the IOVA region is reserved with a 0 length, it corrupts the IOVA rbtree with an entry that has pfnhi pfnlo. If the intent is to us...

kernel: efi: runtime: Fix potential overflow of soft-reserved region size

A flaw was found in the Linux kernel. Due to an integer overflow, certain EFI-related memory reservations might receive a size other than expected, leading to a denial of service...

CVE-2024-38737

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...