Use after free

Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access the admin area even after being invalidated/deleted. This issue has been addressed in version 2.0-M4-2402. All users are advised to upgrade. There are no known workarounds for th...

CVE-2024-0017

CVE-2024-0017 involves a permissions bypass in the shouldUseNoOpLocation function of CameraActivity.java, creating a possible confused deputy and leading to local information disclosure without requiring additional execution privileges. Exploitation requires user interaction. The vulnerability is...

CVE-2023-40085

CVE-2023-40085 involves a missing bounds check in ShimConverter.cpp, in the function convertSubgraphFromHAL , which can trigger a possible out-of-bounds read. This leads to local information disclosure with no additional execution privileges required and no user interaction. The connected documen...

CVE-2024-1444

Rejected reason: Erroneous assignment...

CVE-2023-49508

CVE-2023-49508 affects YetiForceCRM (YetiForceCRM) versions 6.4.0 and earlier. Affected component is the LibraryLicense.php, where an improper handling of the license parameter enables a directory traversal that allows a remote authenticated attacker to obtain sensitive information. The vulnerabi...

CVE-2023-45918

Removed by vendor...

CVE-2023-40113

CVE-2023-40113 affects the Android platform (System component) and stems from a missing permission check that allowed apps to access cross‑user message data. This enables local information disclosure without extra privileges or user interaction. Public details in the provided documents are limite...

CVE-2023-40105

CVE-2023-40105 affects the Android framework (ActivityManagerService), specifically in backupAgentCreated. The root cause is a missing permission check in this path, enabling local information disclosure. The impact is high confidentiality loss with no integrity or availability impact described, ...

CVE-2023-44253

CVE-2023-44253 affects Fortinet FortiManager 7.4.0–7.4.1 and earlier 7.2.5, FortiAnalyzer 7.4.0–7.4.1 and earlier 7.2.5, and FortiAnalyzer-BigData before 7.2.5. Root cause is an information-disclosure flaw that lets an ADOM administrator enumerate other ADOMs and device names via crafted HTTP/HTT...

CVE-2022-23089

CVE-2022-23089 affects FreeBSD kernels where, during core dump handling, proc_getargv() can return an sbuf with sbuf_len() 0 or -1, which is not properly handled. This can enable an out-of-bounds read when a user constructs a specially crafted ps_string, potentially crashing the kernel. Documente...

CVE-2013-0169

creationtimestamp| type| source ---|---|--- 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen| https://t.me/endsodomaofficial/7318 2024-02-15 02:55:48+00:00| seen| https://t.me/fucklulzsecisrahell/6294 2024-02-15 03:00:05+00:00| seen|...

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.

Ltd. is a private scientific and technological enterprise with technology development as the main body, specializing in the research, development, production and sales of remote water, electricity, gas, heat four meters and meter reading system. The water information management platform of Shando...

CVE-2023-52395

Rejected reason: This is unused...

CVE-2023-50336

Rejected reason: This is unused...

CVE-2024-21413

creationtimestamp| type| source ---|---|--- 2024-02-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1227 2024-02-14 16:13:10+00:00| seen| https://t.me/itsecnews/4112 2024-02-14 20:17:06+00:00| seen| https://t.me/ctinow/184974 2024-02-15 08:35:24+00:00| seen|...

CVE-2024-25209

CVE-2024-25209 affects Barangay Population Monitoring System 1.0. The vulnerability is a SQL injection in the resident parameter of /endpoint/delete-resident.php. According to connected sources, the issue has a high impact (CVSS v3.1: 9.8, critical) with network attack vector, no user interaction...

CVE-2024-24698

CVE-2024-24698 is described as an improper authentication vulnerability in Zoom clients that can allow a privileged user to disclose information via local access. The connected documents reference affected Zoom products (e.g., Zoom Client for Meetings and Zoom VDI/Desktop variants) and indicate t...

CVE-2024-24696

CVE-2024-24696 affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows. The root issue is improper input validation that may allow an authenticated user to disclose information over the network. Affected scope includes Zoom products on Windows with r...

CVE-2024-1485

CVE-2024-1485 affects the registry-support library’s decompression logic. An unauthenticated attacker can trick a user into parsing a devfile that uses the parent or plugin keywords, causing the decompressor to extract archives with relative paths that write outside the intended scope. This can l...

CVE-2024-24741

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact ...