CVE-2024-3661

CVE-2024-3661 – Summary : DHCP can inject routes via option 121 in the classless static route option, enabling an attacker on the same LAN to cause VPN traffic to leak onto the physical interface. This affects NetworkManager-based VPN setups where routes aren’t strictly bound to VPN interfaces. I...

CVE-2024-34374

CVE-2024-34374 is a Stored Cross-Site Scripting (XSS) vulnerability in QuomodoSoft ElementsReady Addons for Elementor. The issue affects ElementsReady Addons for Elementor releases up to 5.8.0 (inclusive). Red Hat’s advisory corroborates the same description. Public references list this CVE under...

CVE-2024-34375

CVE-2024-34375 involves WPPOOL Sheets To WP Table Live Sync (WordPress plugin). The Red Hat entry confirms improper input neutralization during web page generation leading to Stored XSS, exploitable by authenticated users (admin context) after viewing crafted content. The vulnerability affects Sh...

CVE-2024-34390

CVE-2024-34390 is a stored XSS in WordPress plugin Post Grid Master (Ajax Filter Everything) that affects Post Grid Master versions up to 3.4.8 (and from n/a through 3.4.8). The issue arises from improper input neutralization during web page generation. The vulnerability has a CVSS v3.1 base scor...

CVE-2024-34379

CVE-2024-34379 is a CSRF flaw in the Rara Theme Restaurant and Cafe for WordPress, affecting versions up to 1.2.1. The connected Red Hat/Wordfence entries confirm the CSRF nature and affected product/version, but provide no patch or remediation details.

CVE-2024-34386

CVE-2024-34386 is an SQL Injection vulnerability in the WordPress plugin Auto Affiliate Links (Lucian Apostol Auto Affiliate Links). The issue is described as improper neutralization of input in SQL commands, affecting Auto Affiliate Links from version n/a up to and including 6.4.3.1. The vulnera...

CVE-2024-34368

CVE-2024-34368: Exposure of Sensitive Information to an Unauthorized Actor in Mooberry Book Manager. Affected: Mooberry Book Manager

CVE-2024-34382

CVE-2024-34382 : Robo Gallery (RoboSoft Robo Gallery) is affected by an unauthenticated information exposure up to version 3.2.18. The vulnerability is confirmed in connected documents and has been patched; upgrade to a version newer than 3.2.18 to mitigate.

CVE-2024-23354

CVE-2024-23354 is a memory-corruption issue in Qualcomm chipsets triggered when an IOCTL is interrupted by a signal. Documented in Qualcomm security bulletins and reflected across sources (NVD, RH, CNNVD, OSV). The records do not specify affected models/versions or a confirmed patch; exploitation...

CVE-2024-23351

CVE-2024-23351 is a memory corruption vulnerability affecting Qualcomm GPU/display components where GPU registers beyond the last protected range are accessible via LPAC submissions. The issue is described across multiple sources (NVD, Red Hat advisory, CVE lists) as memory corruption due to out-...

CVE-2024-21480

CVE-2024-21480 relates to memory corruption in Qualcomm chipsets when playing audio files with large input buffers. The entry is documented across multiple sources (NVD/NCSC/Red Hat) as a memory- or buffer-related vulnerability affecting Qualcomm closed-source components, with references indicati...

CVE-2024-21477

CVE-2024-21477 is linked to Qualcomm WLAN firmware with a Transient DoS issue that occurs while parsing a protected 802.11az FTM frame. Connected sources describe a concrete technical detail: a Buffer Over-read in WLAN firmware related to FTM frame parsing. The vulnerability is associated with Qu...

CVE-2024-21476

CVE-2024-21476 involves memory corruption in Qualcomm Secure Processor related to an improperly validated user-supplied channel ID. Multiple sources confirm the issue arises when a channel ID passed by a user is not validated before use, leading to memory corruption with high impact (CVSSv3.1: CV...

CVE-2024-21475

CVE-2024-21475 affects Qualcomm chipsets; memory corruption occurs when the firmware payload length does not match the expected protocol size, due to improper handling of payload length. Impact is high (C/H/I/A) with a local attack vector, low privileges required, and no user interaction. Remedia...

CVE-2024-21474

CVE-2024-21474 concerns Qualcomm PMIC reliability due to a memory corruption vulnerability. The issue arises when a buffer size from a previous call is used without proper validation or re-initialization, enabling memory corruption. Connected sources identify the CVE with multiple feeds naming Qu...

CVE-2024-21471

CVE-2024-21471 concerns memory corruption that occurs when an IOMMU fails to unmap a GPU buffer in Linux. Multiple connected sources corroborate a memory corruption condition tied to IOMMU unmapping of GPU buffers, affecting Qualcomm-related components (as referenced in Qualcomm security discussi...

CVE-2023-43531

CVE-2023-43531 describes memory corruption during validation of serialized headers when generating key pairs, affecting Qualcomm chipsets (including Qualcomm closed‑source components). The root cause is memory corruption in the header verification step during key pair generation. Impact is listed...

CVE-2023-43530

CVE-2023-43530 describes a memory corruption in HLOS during storage type checks, affecting Qualcomm chipsets. The production impact is described as memory corruption rather than exploitation details in the provided documents. The CVE is referenced across multiple feeds (NVD, Red Hat, NCSC, Androi...

CVE-2023-43529

CVE-2023-43529 describes a transient denial-of-service in Qualcomm Snapdragon/closed-source components caused by processing IKEv2 Informational requests when a malformed fragment packet is received. The impact is DoS affecting availability; no remote code execution or data loss is stated in the p...

CVE-2023-43527

CVE-2023-43527 is an information-disclosure issue arising from parsing the dts header atom in Video. The vulnerability affects Qualcomm-related components (including closed-source parts) and is referenced across multiple sources (Red Hat, NVD, CVE lists, and Pixel advisories) without explicit exp...