CVE-2023-40557

CVE-2023-40557 is a Content Injection (XSS) vulnerability in the WordPress plugin Tabs & Accordion (PickPlugins) affecting versions

CVE-2023-40332

CVE-2023-40332: WordPress WP-PostRatings

CVE-2023-39161

CVE-2023-39161 is a WordPress WP Discussion Board plugin vulnerability affecting versions up to 2.4.8, described as a Content Injection (XSS-related) issue in WordPress Discussion Board. The connected Patchstack entry confirms the fix in version 2.4.9. Base CVSSv3.1 score is 5.4 (Medium); impact ...

CVE-2023-38520

The CVE-2023-38520 entry documents a vulnerability in the WordPress Pinpoint Booking System plugin ≤ 2.9.9.3.4, where external control of an assumed-immutable web parameter enables functionality misuse (parameter tampering). The issue affects the Pinpoint Booking System plugin versions up to 2.9....

CVE-2023-37865

CVE-2023-37865 affects the WordPress plugin IP2Location Country Blocker (versions

CVE-2023-34001

CVE-2023-34001 concerns the WordPress plugin Hide My WP Ghost (vulnerable:

CVE-2023-33930

CVE-2023-33930 affects WordPress plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) up to version 1.5.66. The vulnerability is due to unrestricted ZIP extraction/ upload of a dangerous file type, enabling code injection. Mitigation: upgrade to 1.5.67. Patchstack reports a l...

CVE-2023-28494

CVE-2023-28494 affects WordPress plugin Contact Form Email (

CVE-2024-20887

CVE-2024-20887 affects GalaxyBudsManager PC prior to version 2.1.240315.51, where an arbitrary directory can be created. The connected sources consistently describe this vulnerability and its impact as an arbitrary directory creation, with no public exploit details provided in the documents. The ...

CVE-2024-20886

Affected software: Samsung Live Wallpaper PC. Vulnerability: Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0. The CVE indicates a local, low-privilege flaw with no user interaction and a high availability impact (C/I/A: none/none/high). Root cause / detail: The ...

CVE-2024-20885

CVE-2024-20885 affects Samsung Dialer prior to SMR May-2024 Release 1. The vulnerability is an improper component protection issue that allows local attackers to place a call without proper permission. Impact is described as local, with low to medium severities in provided metrics (CVSS base scor...

CVE-2024-20884

CVE-2024-20884 affects the getSemBatteryUsageStats function in BatteryStatsService. The issue is described as an incorrect use of a privileged API that could allow a local attacker to access privileged API calls. The vulnerability is associated with Samsung/Mobile platforms and is tied to the SMR...

CVE-2024-20883

CVE-2024-20883 involves incorrect use of a privileged API in BatteryStatsService.registerBatteryStatsCallback. Affected component: BatteryStatsService (Android/Samsung). Prior to SMR Jun-2024 Release 1, local attackers with low privileges and no user interaction could exploit the vulnerable API t...

CVE-2024-20882

CVE-2024-20882 describes an out-of-bounds read in the bootloader prior to SMR June-2024 Release 1. The issue enables a physical attacker to access arbitrary data from the device via the bootloader component. The vulnerability is tied to a trusted code path executed with physical access and requir...

CVE-2024-20881

CVE-2024-20881 affects chnactiv TA prior to SMR Jun-2024 Release 1. The issue is due to improper input validation, enabling local privileged attackers to potentially execute arbitrary code. The connected documents confirm the vulnerability description but do not provide explicit remediation steps...

CVE-2024-20880

CVE-2024-20880 describes a stack-based buffer overflow in the bootloader before SMR Jun-2024 Release 1, enabling a physical attacker to overwrite memory. Documents consistently identify the issue as affecting the bootloader with a physical attack vector and potential memory overwrite impact, but ...

CVE-2024-20879

CVE-2024-20879 affects the library component libsavscmn.so prior to Samsung SMR Jun-2024 Release 1. The vulnerability stems from improper input validation in libsavscmn.so, enabling local attackers to write out-of-bounds memory. Impact is indicated as local access with potential integrity/availab...

CVE-2024-20878

CVE-2024-20878 describes a heap out-of-bounds write in parsing grid image within libsavscmn.so, prior to SMR June-2024 Release 1. This local vulnerability allows an attacker with local access to potentially execute arbitrary code. Affected detail in public sources consistently cites the same root...

CVE-2024-20877

Summary: CVE-2024-20877 appears in multiple feeds as a heap out-of-bounds write vulnerability in the grid image header parsing of libsavscmn.so, prior to Samsung SMR Jun-2024 Release 1, enabling local arbitrary code execution. Documents confirm the affected component and impact (local code execut...

CVE-2024-20876

CVE-2024-20876 affects the libsheifdecadapter.so component. The issue is due to improper input validation, enabling local attackers to trigger memory corruption prior to the SMR Jun-2024 Release 1. This vulnerability is local, with high potential impact on confidentiality, integrity, and availabi...