CVE-2023-21262

In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This could lead to false user expectations. User interaction is needed for exploitation...

The vulnerability of the WanDynamicIpV6CfgRpm component (/userRpm/WanDynamicIpV6CfgRpm.htm) in the TP-Link TL-WR940N router software allows a attacker to cause a service failure.

The vulnerability of the WanDynamicIpV6CfgRpm component /userRpm/WanDynamicIpV6CfgRpm.htm of the TP-Link TL-WR940N router software is related to the issue where an operation outside the buffer is performed when processing the ipStart parameter. Exploiting this vulnerability allows a remote attack...

selinux-policy bug fix update

An update is available for selinux-policy. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The selinux-policy packages contain the rules that govern how confined...

CVE-2023-23907

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability...

CVE-2023-22653

An OS command injection vulnerability exists in the vtyshubus tcpdumpstartcb functionality of Milesight UR32L v32.3.0.5. A specially crafted HTTP request can lead to command execution. An authenticated attacker can send an HTTP request to trigger this vulnerability...

Directory traversal

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability...

CVE-2023-23907

A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability...

Milesight UR32L 操作系统命令注入漏洞

The Milesight UR32L is a 4G industrial router from China's Milesight. A command injection vulnerability exists in the Milesight UR32L vtyshubus tcpdumpstartcb function, which can be exploited by an attacker to execute arbitrary commands on the system...

PT-2023-18605 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: A command injection issue exists in the vtysh ubus tcpdump start cb functionality. This can be triggered by a specially crafted HTTP request, potentially leading to command execution. An...

The vulnerability of the relayfs file system implementation in Linux operating systems allows a perpetrator to cause a service failure or expose protected information.

The vulnerability of the relayfs file system implementation in the Linux operating system is related to incorrect calculation of the starting position for reading in the function relayfilereadstartpos in the kernel/relay.c module. Exploiting this vulnerability can allow an attacker to cause servi...

python: urllib.parse url blocklisting bypass

A flaw was found in the Python package. An issue in the urllib.parse component could allow attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.This may lead to compromised Integrity...

CVE-2023-21518

Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...

CVE-2023-21189

In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

PT-2023-18274 · Unknown · Searchwidget

Name of the Vulnerable Software and Affected Versions: SearchWidget versions prior to 3.3 Description: The issue is related to improper access control in the SearchWidget, which allows untrusted applications to start arbitrary activities. This could potentially lead to unauthorized access or...

June 27, 2023—KB5027303 (OS Build 22621.1928) Preview

None None...

The vulnerability of the B.A.T.M.A.N. network interface in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the B.A.T.M.A.N. network interface in the Linux operating system is related to incorrect synchronization between the processes of removing network devices and executing delayed tasks in the batadvdatstarttimer function within the distributedarptable.c module. Exploiting this...

CVE-2023-21095

In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

GHSA-GPV5-7X3G-GHJV fast-xml-parser regex vulnerability patch could be improved from a safety perspective

Summary This is a comment on https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-6w63-h3fj-q4vw and the patches fixing it. Details The code which validates a name calls the validator:...

CVE-2023-25972

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in IKSWEB WordPress Старт plugin = 3.7 versions...

PT-2023-17889 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12L through Android-13 Description: A possible partial lockscreen bypass exists due to a race condition in the canStartSystemGesture function of RecentsAnimationDeviceState.java. This issue could lead to local...