CVE-2024-34796

CVE-2024-34796 is a stored XSS for AccessAlly PopupAlly (WordPress PopupAlly) affecting versions up to 2.1.1, per Red Hat and CVE records. The vulnerability arises from improper neutralization of input during web page generation. The connected Red Hat advisory reiterates the same description and ...

CVE-2024-34797

CVE-2024-34797 is a Stored XSS in the WordPress plugin “Simple Popup Manager” by Benoit Mercusot. The vulnerability affects Simple Popup Manager versions from n/a up to 1.3.5, caused by improper input neutralization during web page generation. The CVE entry provides a CVSS v3.1 base score of 5.9 ...

CVE-2024-34801

CVE-2024-34801 is a cross-site scripting vulnerability in the Praison SEO WordPress plugin. Multiple sources confirm it affects the Praison SEO WordPress plugin versions from n/a up to and including 4.0.15, with the issue described as a DOM-based XSS flaw in the plugin’s web page generation/input...

CVE-2024-35631

FV Flowplayer Video Player (WordPress plugin) is affected by CVE-2024-35631: a Reflected Cross-Site Scripting vulnerability in versions up to 7.5.45.7212. The issue arises from improper neutralization of input during web page generation, enabling an attacker to inject scripts that run in a user’s...

CVE-2024-35630

CVE-2024-35630 affects WP TripAdvisor Review Slider (LJ Apps) and is an authenticated SQL Injection in the plugin’s code path, enabling an Administrator+ user to exploit improper input handling. Wordfence details show the vulnerability exists in versions up to 12.6 (including), with CVSS v3.1 bas...

CVE-2024-34754

CVE-2024-34754 is a data-exposure vulnerability affecting the WordPress plugin Contact Form Widget, exposed through versions up to 1.3.9. Root cause is exposure of sensitive information to unauthorized actors, leading to information disclosure. The issue affects the Contact Form Widget component ...

CVE-2024-34798

CVE-2024-34798 corresponds to a vulnerability in the WordPress plugin Debug Log – Manger Tool (Lukman Nakib) that allows unauthenticated exposure of sensitive data via log files. Affected versions range up to 1.4.5; the issue stems from insertion of sensitive information into log files. The CVE i...

CVE-2024-34803

CVE-2024-34803 is a Missing Authorization vulnerability affecting the WordPress Fastly plugin. Public descriptions show impact on Fastly: from n/a through 1.2.25, indicating that all versions up to 1.2.25 are affected. The Red Hat and NVD entries mirror this issue with the same description. The C...

CVE-2024-3829

CVE-2024-3829 affects qdrant/qdrant 1.9.0-dev. The root cause is arbitrary file read/write during the snapshot recovery process via manipulated snapshot files containing symlinks, enabling an attacker to read arbitrary files and write payloads in the snapshot directory. The issue is fixed in vers...

CVE-2024-23363

CVE-2024-23363 describes a transient Denial of Service in WLAN firmware when processing an improperly formatted Fine Time Measurement (FTM) management frame. The vulnerability is associated with Qualcomm closed‑source WLAN components and is rated CVSS v3.1 base 7.5 (Network attack, low complexity...

CVE-2024-23360

CVE-2024-23360 involves a memory corruption issue in LPAC-related components when creating an LPAC client, where the LPAC engine is allowed to access GPU registers. Affected scope is described across multiple sources (NVD, Red Hat, CVE lists) as memory corruption with HIGH impact on confidentiali...

CVE-2024-21478

CVE-2024-21478 describes a transient Denial of Service affecting a KGSL memory entry object during DMA when setting up a fence callback. The available sources consistently reference a DoS condition without publicly disclosed exploit details, affected products, or confirmed remediation in the prov...

CVE-2023-43556

CVE-2023-43556 describes memory corruption in the Hypervisor when platform information is not aligned. The available connected documents corroborate this vulnerability across multiple sources (NVD, Red Hat CVE entry, CVE list, Vuln Enrichment) with the same description. The materials do not speci...

CVE-2023-43555

Technical details (affected product, versions, root cause, and fixes) are not publicly provided in the supplied documents; monitor for updates from vendors and security advisories.

CVE-2023-43551

The CVE-2023-43551 entry is confirmed in connected sources as a cryptographic/authentication issue occurring during LTE attach, where a rogue base station can skip the authentication phase and immediately issue the Security Mode Command. The vulnerability is attributed to Qualcomm closed‑source c...

CVE-2023-43545

CVE-2023-43545 corresponds to a memory corruption issue in WLAN host code triggered when the user space sends an excessive number of scan frequency entries or channels. Multiple connected documents identify this as a WLAN-related vulnerability (Qualcomm components table shows CVE-2023-43545 under...

CVE-2023-43544

CVE-2023-43544 is a memory corruption/Use-After-Free issue described as occurring when an IPC callback handle is used after it has been released during a register callback by another thread. Public references indicate this vulnerability is associated with Qualcomm Audio components and a Red Hat a...

CVE-2023-43543

CVE-2023-43543 affects Qualcomm audio components; a memory corruption can occur during playback/recording due to a race between allocation and deallocation of the graph object. Available documents identify this as a memory corruption in Audio with a race condition; no exploit details are provided...

CVE-2023-43542

CVE-2023-43542 describes a memory corruption in the Trusted Execution Environment from copying a keyblob’s material when the key material size isn’t properly checked. Documented details indicate a high-severity impact (C/H/I/H/A/H) with local attacker access and no user interaction required, per ...

CVE-2023-43538

CVE-2023-43538 corresponds to a memory corruption issue in TZ Secure OS during the initialization of the Tunnel Invoke Manager. Affected component: TZ Secure OS (closed‑source Qualcomm components are implicated in related advisories). Impact per connected docs: high/critical severity with local a...