CVE-2024-33939

CVE-2024-33939 relates to the WordPress plugin Masteriyo – LMS (<= 1.7.3). Affected component: Masteriyo LMS REST endpoints exposing course progress data. Root cause: authentication/authorization bypass (insecure direct object reference) that allows unauthenticated users to access course progr...

CVE-2018-9380

CVE-2018-9380 affects Google Pixel devices via out-of-bounds write in l2c_lcc_proc_pdu() within l2c_fcr.cc, caused by improper input validation. The vulnerability can enable remote privilege escalation with no extra execution privileges required, and exploitation requires user interaction. Public...

CAN-2004-0990

CVE-2004-0990 is referenced across connected advisories/plugins (e.g., Ubuntu USN-11-1/USN-21-1 and SLES9 updates) as a GD graphics library issue. The documents confirm the CVE association and that updates to the gd package are the proposed remediation, but do not provide detailed root-cause, aff...