CVE-2023-20831: Out-of-bounds Write

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162...

CVE-2023-20830: Out-of-bounds Write

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156...

CVE-2023-20828: Out-of-bounds Write

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in gps, which may result in out-of-bounds writes...

PT-2023-17653 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-17651 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

new package: gpsd-minimal

An update is available for gpsd-minimal. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gpsd package provides a service daemon that mediates access to a GPS...

CVE-2023-30874

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Curtis GPS Plotter gps-plotter allows DOM-Based XSS.This issue affects GPS Plotter: from n/a through = 5.4.0...

CVE-2023-30874

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin = 5.1.4 versions...

CVE-2023-30874 WordPress GPS Plotter plugin <= 5.4.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Steve Curtis GPS Plotter gps-plotter allows DOM-Based XSS.This issue affects GPS Plotter: from n/a through = 5.4.0...

CVE-2023-30874

CVE-2023-30874 corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress GPS Plotter plugin by St. Pete Design, affecting versions

WordPress plugin Gps Plotter 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-30874: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin = 5.1.4 versions...

CVE-2023-21650

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length...

Memory corruption

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length...

CVE-2023-21650 Improper Validation of Array Index in GPS HLOS Driver

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length...

CVE-2023-21650

CVE-2023-21650 describes memory corruption in the GPS HLOS Driver triggered when injectFdclData processes data with an invalid length. Multiple sources corroborate a Qualcomm GPS HLOS component impact with this CVE; Red Hat and CVE listings align with a GPS driver issue. The Android Pixel bulleti...

CVE-2023-21650: Improper Validation of Array Index

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length...

EulerOS 2.0 SP9 : ntp (EulerOS-SA-2023-2621)

According to the versions of the ntp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq...

CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...