PUB-A-270148537

In aocservicesetreadblocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

pcs security update

0.10.15-4.0.1.el88.1 - Replace HAM-logo.png with a generic one 0.10.15-4.el88.1 - Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command - Fix pcs stonith update-scsi-devices command which was broken since Pacemaker-2.1.5-rc1 - Updated bundled rubygem...

PT-2023-15220 · WordPress · Simple Share Buttons Adder

Name of the Vulnerable Software and Affected Versions: Simple Share Buttons Adder plugin versions = 8.4.7 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-23456 · Unknown · Agshome Smart Alarm

Name of the Vulnerable Software and Affected Versions: AGShome Smart Alarm version 1.0 Description: The issue is related to weak security in the transmitter, allowing attackers to gain full access to the system via a code replay attack. Recommendations: For AGShome Smart Alarm version 1.0, consid...

PT-2023-15188 · WordPress · Plugincraft Mediamatic – Media Library Folders

Name of the Vulnerable Software and Affected Versions: Plugincraft Mediamatic – Media Library Folders plugin versions = 2.8.1 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing...

PT-2023-20972 · WordPress · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg plugin for WordPress versions up to, and including, 2.7.9.8 Description: The issue is related to a missing capability check on the check license functions, allowing authenticated attackers with subscriber-level permissions and abov...

PT-2023-11982 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...

PT-2023-23371 · Unknown · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: Pharmacy Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the email parameter at the login core.php file. Recommendations: For Pharmacy Management System...

PT-2023-19116 · WordPress · Themeist I Recommend This

Name of the Vulnerable Software and Affected Versions: Themeist I Recommend This plugin versions 3.8.3 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Themeist I Recommend Th...

CVE-2023-20695

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 For MT6880, MT6890, MT6980 and MT69...

Out-of-bounds

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583...

Out-of-bounds

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767870; Issue ID: ALPS07767870...

Out-of-bounds

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07576935; Issue ID: ALPS07576935...

Out-of-bounds

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07733998 / ALPS07874388 For MT6880 and MT6890 only; Issue I...

PT-2023-17908 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: A logic error in the code of InstallPackageHelper.java, specifically in the verifyReplacingVersionCode function, allows for a possible downgrade of system apps below the system image...

CVE-2023-29195 Vitess VTAdmin users that can create shards can deny access to other functions

Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing / characters from VTAdmin such that from that point on, anyone who tries to create a new shard fr...

PT-2023-20755 · Sourcecodester · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue was found in the file view product.php, where the manipulation of the id argument leads to sql injection. This can be initiated remotely. Recommendation...

PT-2023-13083 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2023-23880 · Videolan +3 · Dav1D +3

Name of the Vulnerable Software and Affected Versions: VideoLAN dav1d versions prior to 1.2.0 Description: The issue is related to a thread task.c race condition that can lead to an application crash. This condition is associated with the dav1d decode frame exit function. Recommendations: For...

Out-of-bounds

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...