Design/Logic Flaw

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first...

CVE-2023-34148

Overview. The CVE concerns Trend Micro Apex One and Apex One as a Service security agent, described as an exposed dangerous function vulnerability that could enable a local attacker to escalate privileges and write an arbitrary value to specific agent subkeys. The threat requires the attacker to ...

CVE-2023-34147

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first...

CVE-2023-34146

Trend Micro Apex One and Apex One as a Service security agent are affected by CVE-2023-34146, described as an exposed dangerous function vulnerability that could allow a local attacker to escalate privileges and write an arbitrary value to specific agent subkeys. The vulnerability requires the at...

CVE-2023-34146

An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first...

Memory corruption

Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload...

PT-2023-12791 · Qualcomm · Snapdragon +215

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the WLAN HAL when an arbitrary value is passed in the WMI UTF command payload. Recommendations: At the moment,...

There is no validation of DynamicQuorumParams.quorumCoefficient.

Lines of code Vulnerability details Impact There is no validation of DynamicQuorumParams.quorumCoefficient and any value can be used during this calculation. Proof of Concept As we can see from the comment, quorumCoefficient should be an integer with 6 decimals but there is no require for this...

CVE-2022-34914

Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The clientIp variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary valu...

WordPress Wp Cookie Choice Cross-site Request Forgery Vulnerability

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language, a WordPress open source application plugin that supports setting up personal blogging sites on servers with PHP and MySQL. WordPress Wp Cookie Choice 1.1.0 and earlier versions are vulnerable to...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

Command injection

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

CVE-2021-33034

In the Linux kernel before 5.12.4, net/bluetooth/hcievent.c has a use-after-free when destroying an hcichan, aka CID-5c4c8c954409. This leads to writing an arbitrary value...

CVE-2021-33033

The Linux kernel before 5.11.14 has a use-after-free in cipsov4genopt in net/ipv4/cipsoipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value...

HunterCoin Digital Error Vulnerability

HunterCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in HunterCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

MSXAdvanced Digital Error Vulnerability

MSXAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in MSXAdvanced's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...

RajTestICO Digital Error Vulnerability

RajTestICO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in RajTestICO's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

JustWallet Number Error Vulnerability

JustWallet is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in JustWallet's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

LandCoin Digital Error Vulnerability

LandCoin is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in LandCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

RRToken Number Error Vulnerability

RRToken is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in RRToken's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...