CVE-2024-23697

CVE-2024-23697: A use-after-free in RGXCreateHWRTData_aux (rgxta3d.c) enables possible arbitrary code execution and local kernel privilege escalation. No user interaction required. Documents consistently describe this as a local-privilege escalation vulnerability with kernel impact and do not pro...

CVE-2024-31312

CVE-2024-31312 affects Google Android Framework. It describes a local information disclosure due to a missing permission check in multiple locations, allowing access to played media without extra privileges and without user interaction. The issue is listed in the Android Security Bulletin and is ...

CVE-2024-31310

CVE-2024-31310 affects Android: in AutofillManagerServiceImpl.newServiceInfoLocked, improper input validation can allow hiding an enabled Autofill service in the Autofill service settings. Impact is local privilege escalation with high confidentiality/integrity/availability implications, requirin...

CVE-2024-2177

CVE-2024-2177 affects GitLab CE/EE: vulnerable versions are 16.3 up to but not including 16.11.5, 17.0 up to but not including 17.0.3, and 17.1 up to but not including 17.1.1. The issue is a Cross Window Forgery in the OAuth authentication flow, exploitable via a crafted payload. The connected do...

CVE-2023-50806

CVE-2023-50806 affects Samsung Mobile Processor, Wearable Processor, and Modems (Exynos 9820/9825/980/990/850/1080/2100/2200/1280/1380/1330/9110/W920/W930, Exynos Modem 5123, 5300). Description: an out-of-bounds heap-buffer access in the SIM Proactive Command. Impact and likelihood: CVSSv3.1 base...

CVE-2024-36041

The CVE-2024-36041 issue affects KDE Plasma Workspace (plasma-workspace) prior to 5.27.11.1 and 6.x prior to 6.0.5.1, where KSmserver incorrectly accepts ICE connections from localhost, allowing a local attacker to gain access to the session manager and potentially execute code on the victim at t...

CVE-2024-33870

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal via a crafted PostScript document to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of ../../foo to ./../../foo and this will grant access if ./ i...

CVE-2024-33870

CVE-2024-33870 affects Artifex Ghostscript up to version 10.03.1. The issue is a path traversal vulnerability in PostScript handling that can reach arbitrary files when the current directory is within permitted paths, e.g., transforming ../../foo to ./../../foo and gaining access if ./ is allowed...

CVE-2016-10000

Technical details for CVE-2016-10000 are not publicly provided in the supplied documents. No affected products, vectors, or fixes are given. Monitor for updates as new information becomes available.

CVE-2021-3074

Technical details for CVE-2021-3074 are not publicly available in the provided documents; no affected products, versions, or impact are disclosed. Monitor for updates.

CVE-2021-3066

Technical details for CVE-2021-3066 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-3072

Technical details for CVE-2021-3072 are not publicly available in the provided documents. Monitor for updates when more information is disclosed by the reporting party or vendors.

CVE-2024-22232

CVE-2024-22232 describes a directory traversal in Salt’s file server triggered by a specially crafted URL. The underlying issue is input validation that allows traversal sequences, enabling a malicious user to read arbitrary files from a Salt master’s filesystem. Affected component: Salt master/f...

CVE-2023-35049

CVE-2023-35049 affects the WordPress WooCommerce Stripe Payment Gateway plugin

CVE-2023-41805

CVE-2023-41805 is a Missing Authorization (Broken Access Control) issue in Brainstorm Force Premium Starter Templates and Brainstorm Force Starter Templates astra-sites, affecting Premium Starter/Templates ≤ 3.2.5. Root cause: insufficient authorization checks enabling access to data/configs. Pat...

CVE-2023-39993

CVE-2023-39993 refers to a Broken Access Control issue in the WordPress plugin ElementsKit Lite / Elementor addons . Affected versions are ≤ 2.9.0 (Wpmet ElementsKit Lite). The root cause is a Missing Authorization/Access control weakness that could allow unauthorized actions. Remediation: upgrad...

CVE-2023-40004

CVE-2023-40004 is a Missing Authorization vulnerability affecting multiple ServMask WordPress extensions (Box, OneDrive, Dropbox, Google Drive) for All-in-One WP Migration. Connected sources (Patchstack) confirm unauthenticated access token manipulation due to insufficient authorization in the pl...

CVE-2023-46146

CVE-2023-46146 relates to Themify Themify Ultra (Theme) with versions up to 7.3.5, where a Missing Authorization/Broken Access Control vulnerability could allow unauthorized access. Public sources indicate the issue affects Themify Ultra through 7.3.5 and that Patchstack lists the fixed version a...

CVE-2023-47770

CVE-2023-47770 concerns Betheme WordPress theme (Muffin Group) with a Missing Authorization vulnerability in versions up to 27.1.1. The issue is described as Broken Access Control / Missing Authorization, enabling privilege escalation for authenticated users (Contributor level and above) to acces...

CVE-2023-47681

CVE-2023-47681 is a Missing/Broken Access Control vulnerability in QuadLayers WooCommerce Checkout Manager (WordPress plugin). It affects plugins up to version 7.3.0, allowing unauthenticated actors to exploit due to insufficient authorization checks. Patch details: fixed in version 7.3.1. Public...