CVE-2024-20013

CVE-2024-20013: MediaTek media chips — in keyInstall there is an out-of-bounds write due to a missing bounds check, enabling local privilege escalation to System level. Exploitation details are not provided in the documents; exploitation status is not confirmed. Patch ID ALPS08471742; Issue ID AL...

CVE-2024-20012

The CVE-2024-20012 issue affects MediaTek’s keyInstall module, caused by a type-confusion bug that enables local privilege escalation to System level. Exploitation reportedly requires no user interaction. The available patch reference is ALPS08358566 (Issue ALPS08358566). No exploitation details ...

CVE-2024-20003

CVE-2024-20003 affects MediaTek Modem NL1. The issue is an input-validation weakness in the Modem NL1 that can cause a system crash and remote denial of service when an invalid NR RRC Connection Setup message is received. Exploitation requires no user interaction and no extra privileges. A patch ...

CVE-2024-20011

The CVE-2024-20011 issue affects MediaTek’s alac decoder, caused by an incorrect bounds check that enables information disclosure and could lead to remote code execution without user interaction. The vulnerability is rated high/critical with network access and no privileges required. A patch is r...

CVE-2024-20010

The CVE-2024-20010 entry describes a MediaTek vulnerability in the keyInstall module caused by type confusion, enabling local privilege escalation to SYSTEM without user interaction. Patch ALPS08358560 (Issue ALPS08358560) is referenced as the fix. Connected documents corroborate the local-privil...

CVE-2024-20007

CVE-2024-20007 affects MediaTek MP3 decoder: a race condition could trigger an out-of-bounds write, enabling remote escalation of privileges with user interaction required. Public details confirm the mp3 decoder component and patch ALPS08441369; exploitation status is not provided in the sources....

CVE-2024-20006

CVE-2024-20006 affects MediaTek components (DA module) and is due to an out-of-bounds write caused by a missing bounds check. The vulnerability could enable local escalation of privilege with System execution privileges required; no user interaction is needed. Public references across Red Hat, NV...

CVE-2023-51504

CVE-2023-51504 refers to a WordPress plugin vulnerability in Dan's Embedder for Google Calendar (Dans Gcal) with stored XSS. The connected data confirms the issue exists in the WordPress plugin and is characterized by an improper neutralization of input during web page generation, enabling stored...

Open redirect

Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2023...

CVE-2023-51951

CVE-2023-51951 is an authenticated/unauthenticated SQL injection in Stock Management System 1.0 where the id parameter in manage_bo.php can allow a remote attacker to execute arbitrary code. The CVE is supported by multiple sources (NVD entry with CVSS v3.1: 9.8 base score, high impact, network a...

CVE-2024-24468

CVE-2024-24468 affects flusity-CMS v2.33. A Cross Site Request Forgery allows a remote attacker to execute arbitrary code via add_customblock.php. Severity according to NVD/CVE data is high (CVSS v3.1: 8.8; AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability impact is described as remote arbi...

CVE-2024-22667

CVE-2024-22667 affects Vim prior to 9.0.2142. The root cause is a stack-based buffer overflow in map.c did_set_langmap where sprintf writes to the error buffer passed to option callbacks. Public descriptions indicate vulnerable versions are before 9.0.2142; a patch exists in 9.0.2142+ (examples n...

CVE-2024-24265

CVE-2024-24265 affects gpac v2.2.1, with a memory leak in the gf_filter_pid_merge_properties_internal function caused by the dst_props variable. Several connected sources confirm the issue and its association with gpac 2.2.1, including Red Hat and OSV entries. No public exploit details are provid...

CVE-2024-24260

CVE-2024-24260 refers to a Use-After-Free (UAF) in media-server v1.0.0, triggered via the function sip_subscribe_remove in /uac/sip-uac-subscribe.c. The issue is described consistently across multiple sources (NVD, Red Hat, OSV, CVE lists) as a memory corruption vulnerability with an impact on av...

CVE-2024-22567

Summary (CVE-2024-22567): A file-upload vulnerability in MCMS 5.3.5 allows an attacker to upload arbitrary files via a crafted POST to /ms/file/upload.do. The issue is documented across multiple sources (Red Hat, Veracode, GitHub advisory, OSV and others) and is rated with high impact (confidenti...

CVE-2024-24396

Stimulsoft Dashboard.JS (Stimulsoft GmbH)

CVE-2024-24397

Summary : CVE-2024-24397 affects Stimulsoft Dashboard.JS prior to 2024.1.2. The vulnerability is a Cross Site Scripting (XSS) flaw due to improper sanitization of the ReportName field, enabling a remote attacker to execute arbitrary code via a crafted payload. The commonly cited impact is client-...

CVE-2024-24263

Lotos WebServer v0.1.1 contains a Use-After-Free (UAF) vulnerability in the function response_append_status_line (file /lotos/src/response.c). Root cause: memory reuse after freeing, enabling potential server instability or crashes. Impact: high availability (per CVSS vector AV:N/AC:L/PR:N/UI:N/S...

CVE-2024-24543

CVE-2024-24543 affects the Tenda AC9 router (v3.0) with firmware v.15.03.06.42_multi. The root cause is a buffer overflow in the setSchedWifi function, allowing a remote attacker to trigger denial of service or arbitrary code execution by supplying crafted overflow data. Impact is described as hi...

CVE-2024-24469

CVE-2024-24469 : A Cross Site Request Forgery flaw in flusity-CMS v2.33 allows a remote attacker to execute arbitrary code via the delete_post.php endpoint. The public records confirm an ARBITRARY CODE EXECUTION risk with a CVSSv3.1 base score of 8.8 (HIGH) and an attack vector of network with us...