CVE-2023-40632

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed...

UNISOC Chipsets Resource Management Error Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that originates from a logic error that results in memory reuse after release. An attacker could exploit the vulnerability to cause information disclosure...

CVE-2023-30731

Summary (mode C): CVE-2023-30731 relates to Samsung Mobile devices prior to the SMR Oct-2023 Release 1. The issue is a logic error during package installation via a debugger command, which could let a physical attacker install an application that has a different build type. The documents do not p...

CVE-2023-30731

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...

CVE-2023-30731

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2023 Release 1 version, which originates from a logic error when installing a software package...

PT-2023-22934 · Samsung Mobile +1 · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: A logic error in package installation via debugger command allows a physical attacker to install an application that has a different build type. This issue is present prior to the SMR...

ASB-A-270368476

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-279767668

there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-3914

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

Code injection

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914

CVE-2023-3914 – GitLab EE : A business-logic flaw allows access to internal projects, caused by a service account not being removed when a namespace is deleted. Affected: GitLab Enterprise Edition prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Impact: potential exposure of inter...

CVE-2023-3914 Incorrect User Management in GitLab

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

CVE-2023-3914

Removed by vendor...

GitLab 0 < 16.2.8 / 16.3 < 16.3.5 / 16.4 < 16.4.1 (CVE-2023-3914)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a...

FreeBSD : Gitlab -- vulnerabilities (6e0ebb4a-5e75-11ee-a365-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6e0ebb4a-5e75-11ee-a365-001b217b3468 advisory. - An information disclosure issue in GitLab CE/EE affecting all versions prior to 16.2.8, 16.3...

kernel: bypass of shadow stack protection due to a logic error

A vulnerability was found in the efirtasmwrapper of the efi-rt-wrapper.S in the Linux kernel, where there is a possible bypass of shadow stack protection due to a logic error in the code. This flaw could lead to local escalation of privilege without additional execution privileges needed...

RHEL 9 : kernel (RHSA-2023:5069)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5069 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. The following packages have been upgraded to a later...

Google Android Information Disclosure Vulnerability (CNVD-2024-13726)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a logic error in the code in loadMediaResumptionControls of MediaResumeListener.kt. An attacker can exploit this vulnerability to obtain sensitiv...

Google Android Information Disclosure Vulnerability (CNVD-2024-13727)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a logic error in the code in onHostEmulationData of HostEmulationManager.java. An attacker can exploit this vulnerability to obtain sensitive...