CVE-2023-43525

CVE-2023-43525 describes a memory corruption vulnerability in Qualcomm audio components related to copying sound model data from user space to a kernel buffer during sound model registration. The issue affects Qualcomm audio-related components listed in the Android Pixel bulletin (CVE-2023-43525 ...

CVE-2023-43524

CVE-2023-43524 describes memory corruption when the bandpass filter order received from AHAL is not within the expected range. Public documentation ties this to Qualcomm audio components and notes impact on Qualcomm Pixel devices; the Red Hat and CVE listings reiterate the same description. The A...

CVE-2023-43521

CVE-2023-43521 is described across multiple sources as memory corruption that occurs when multiple listeners are registered to the same file descriptor. The Red Hat and NVD entries reiterate the same flaw; EUVD/CNNVD entries align on the memory corruption vector. The documents do not provide conc...

CVE-2023-33119

CVE-2023-33119 describes a memory corruption in a Qualcomm closed‑source component triggered while loading a VM from a signed VM image that is not coherent in the processor cache. Connected records corroborate impact as LOCAL with high severity (CONFIDENTIALITY, INTEGRITY, AVAILABILITY affected) ...

CVE-2024-32972

CVE-2024-32972 affects go-ethereum (geth). A vulnerable node can be forced to consume excessive memory by processing specially crafted p2p messages, triggering a denial of service. The underlying issue is related to handling certain p2p requests (notably a GetBlockHeadersRequest with crafted valu...

CVE-2024-3576

CVE-2024-3576 affects MOXA NPort 5100A Series firmware v1.6 and earlier. The root cause is failure to properly neutralize user-controllable input in the device’s web server output, enabling a cross-site scripting (XSS) condition. Impact per sources: potential disclosure of sensitive information a...

CVE-2023-6854

CVE-2023-6854 affects the Breakdance WordPress plugin, enabling Stored XSS via the plugin’s custom postmeta output in all versions up to 1.7.0. The root cause is insufficient input sanitization and output escaping on user-supplied post meta fields, allowing authenticated attackers with contributo...

CVE-2024-4526

CVE-2024-4526 affects Campcodes Complete Web-Based School Management System 1.0. The issue is a cross-site scripting vulnerability in the month parameter of /view/student_payment_details3.php. Attack could be initiated remotely and the exploit has been publicly disclosed. Multiple connected sourc...

CVE-2024-3756

The CVE-2024-3756 vulnerability affects MF Gig Calendar WordPress plugin versions ≤ 1.2.1 and could allow CSRF-enabled attackers to delete arbitrary events by convincing a logged-in user (Contributors+) to perform actions. The linked Red Hat/OSV entries confirm the same issue description but do n...

CVE-2024-3755

CVE-2024-3755 affects MF Gig Calendar for WordPress up to version 1.2.1. The root cause is that the plugin does not sanitize/escape certain settings, enabling a stored XSS when a high-privilege user (e.g., Editor) interacts with the plugin, even if unfiltered_html is disallowed (such as in multis...

CVE-2024-4525

The CVE-2024-4525 entry describes a cross-site scripting (XSS) vulnerability in Campcodes Complete Web-Based School Management System 1.0, arising from manipulation of the index argument in the file /view/student_payment_details4.php. It affects unknown/unspecified code paths within that file and...

CVE-2024-4524

CVE-2024-4524 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting in the /view/student_payment_invoice.php file via manipulation of the desc parameter. It is exploitable remotely and an exploit has been disclosed publicly. The available d...

CVE-2024-4522

CVE-2024-4522 affects Campcodes Complete Web-Based School Management System 1.0. The vulnerability is a cross-site scripting flaw in an unknown functionality of the file /view/teacher_salary_details.php, caused by manipulation of the index argument. Remote exploitation is possible, and the exploi...

CVE-2024-20021

The CVE-2024-20021 issue affects the ARM Trusted Firmware (ATF) SPM component and stems from a logic error that allows remapping of physical memory to virtual memory. This could enable local privilege escalation with System execution privileges (S-mode) required, and exploitable without user inte...

CVE-2024-20060

The CVE-2024-20060 entry concerns MediaTek devices with a vulnerability in the da module causing privilege escalation due to an incorrect status check. Impact is local privilege escalation with System execution privileges required, and exploitation does not require user interaction (per multiple ...

CVE-2024-20059

CVE-2024-20059 involves a local privilege escalation in the MediaTek stack due to an incorrect status check in the da module. The flaw can allow a non-privileged or high-privileged user to gain SYSTEM execution privileges without user interaction. Exploitation details are not provided in the conn...

CVE-2024-20058

The CVE-2024-20058 issue affects MediaTek devices (keyInstall function) where a missing bounds check enables an out-of-bounds read. This can lead to local information disclosure and potential System-level execution privileges, with no user interaction required. Multiple connected sources (includi...

CVE-2023-32871

CVE-2023-32871 affects MediaTek DA (Device Access) in MediaTek-based platforms. The vulnerability arises from an incorrect status check, enabling local escalation of privilege with no additional execution privileges required and no user interaction. The issue is documented across multiple sources...

CVE-2024-20057

CVE-2024-20057 is a MediaTek keyInstall vulnerability caused by a missing bounds check that enables an out-of-bounds write, potentially leading to local privilege escalation with SYSTEM privileges. Exploitation is reported as not requiring user interaction. The issue is associated with MediaTek r...

CVE-2024-4511

CVE-2024-4511 affects Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4, specifically an issue in the Message Handler that leads to a buffer overflow. The vulnerability is described as critical, with the exploit disclosed publicly. The available documents identify the affected product a...