ClicShopping 3.402 Cross Site Scripting Vulnerability

Title: ClicShoppingV3-Version3.402 XSS-Reflected Author: nu11secur1ty Vendor: https://www.clicshopping.org/forum/ Software: https://github.com/ClicShopping/ClicShoppingV3/releases/tag/version3402 Reference:...

CVE-2022-31752

Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2022-31752

Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2022-31752

Technical details for CVE-2022-31752 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-31752

Missing authorization vulnerability in the system components. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40051

There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2021-40051

There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality...

CVE-2021-40051

Technical details (affected products, versions, root cause, exploits, or fixes) are not publicly provided in the connected documents for CVE-2021-40051. Monitor for updates.

CVE-2021-40064

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

CVE-2021-40064

CVE-2021-40064 is linked in connected documents to Huawei EMUI and Magic UI (Android-based) with a heap-based buffer overflow in system components. The root cause described across CNVD/CNNVD and Red Hat entries is a heap overflow that can affect stability/availability, potentially enabling a deni...

CVE-2021-40064: Out-of-bounds Write

There is a heap-based buffer overflow vulnerability in system components. Successful exploitation of this vulnerability may affect system stability...

PT-2022-11172 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: System components affected versions not specified Description: The issue concerns unauthorized access to system components. Successful exploitation will impact confidentiality. Recommendations: At the moment, there is no information about a...

PT-2022-11185

Name of the Vulnerable Software and Affected Versions System components affected versions not specified Description The issue is a heap-based buffer overflow in system components. Successful exploitation may affect system stability. Recommendations At the moment, there is no information about a...

Android Patches Actively Exploited Zero-Day Kernel Bug

Among Google’s November Android security updates is a patch for a zero-day weakness that “may be under limited, targeted exploitation,” the company said. Out of this month’s batch of 39 patches, 18 of them plug flaws in the framework and system components and another 18 address vulnerabilities in...

Improper access control

NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAPIOCWRITE paths, where improper access controls may lead to code execution, complete denial of service, and seriously compromised integrity of all system components...

Jetson Linux Access Control Error Vulnerability

Jetson Linux is an application software. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for compute-intensive projects.Jetson Linux is vulnerable to an access control error that could be exploited by an attacker to cause code execution, a...

Design/Logic Flaw

Cloud Foundry CAPI Cloud Controller, versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain which is true in the default CF Deployment manifest, were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially...