CVE-2024-20923

...

CVE-2024-20925

...

CVE-2024-20919

...

CVE-2024-20917

...

CVE-2024-20909

...

CVE-2024-20911

...

CVE-2024-20907

...

CVE-2024-20903

...

Use after free

Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access the admin area even after being invalidated/deleted. This issue has been addressed in version 2.0-M4-2402. All users are advised to upgrade. There are no known workarounds for th...

CVE-2024-0017

CVE-2024-0017 involves a permissions bypass in the shouldUseNoOpLocation function of CameraActivity.java, creating a possible confused deputy and leading to local information disclosure without requiring additional execution privileges. Exploitation requires user interaction. The vulnerability is...

CVE-2023-40085

CVE-2023-40085 involves a missing bounds check in ShimConverter.cpp, in the function convertSubgraphFromHAL , which can trigger a possible out-of-bounds read. This leads to local information disclosure with no additional execution privileges required and no user interaction. The connected documen...

CVE-2024-1444

Rejected reason: Erroneous assignment...

CVE-2023-49508

CVE-2023-49508 affects YetiForceCRM (YetiForceCRM) versions 6.4.0 and earlier. Affected component is the LibraryLicense.php, where an improper handling of the license parameter enables a directory traversal that allows a remote authenticated attacker to obtain sensitive information. The vulnerabi...

CVE-2023-45918

Removed by vendor...

CVE-2023-40113

CVE-2023-40113 affects the Android platform (System component) and stems from a missing permission check that allowed apps to access cross‑user message data. This enables local information disclosure without extra privileges or user interaction. Public details in the provided documents are limite...

CVE-2023-40105

CVE-2023-40105 affects the Android framework (ActivityManagerService), specifically in backupAgentCreated. The root cause is a missing permission check in this path, enabling local information disclosure. The impact is high confidentiality loss with no integrity or availability impact described, ...

CVE-2023-44253

CVE-2023-44253 affects Fortinet FortiManager 7.4.0–7.4.1 and earlier 7.2.5, FortiAnalyzer 7.4.0–7.4.1 and earlier 7.2.5, and FortiAnalyzer-BigData before 7.2.5. Root cause is an information-disclosure flaw that lets an ADOM administrator enumerate other ADOMs and device names via crafted HTTP/HTT...

CVE-2022-23089

The FreeBSD operating system is vulnerable to an out-of-bounds read within the elf_note_prpsinfo() function. The root cause is that proc_getargv() might return an sbuf with a sbuf_len() of 0 or -1, which is not handled correctly. A user providing a specially crafted ps_string during core dumping ...

CVE-2013-0169

creationtimestamp| type| source ---|---|--- 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen| https://t.me/endsodomaofficial/7318 2024-02-15 02:55:48+00:00| seen| https://t.me/fucklulzsecisrahell/6294 2024-02-15 03:00:05+00:00| seen|...

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.

Ltd. is a private scientific and technological enterprise with technology development as the main body, specializing in the research, development, production and sales of remote water, electricity, gas, heat four meters and meter reading system. The water information management platform of Shando...