Google Android elevation of privilege vulnerability (CNVD-2024-07112)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by attackers to gain elevated privileges...

Google Android elevation of privilege vulnerability (CNVD-2023-69042)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a logic error in the code of the isServerCertChainValid module of InsecureEapNetworkHandler.java, which can be exploited by an attacke...

Google Android Code Execution Vulnerability (CNVD-2023-82071)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that originates from an incorrect boundary check in the TRANSPOSERSETTINGS module of lpptran.h, which can be exploited by an attacker to execute arbitrary code on t...

Google Android elevation of privilege vulnerability (CNVD-2023-82060)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a logic error in the multiple method code of KeyguardViewMediator.java, where the screen may not lock after a timeout. An attacker can...

Google Android onCreate module authorization issue vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android onCreate module has an authorization issue vulnerability that stems from a lack of permission checking in the onCreate module of ManagePermissionsActivity.java, with one possible way to bypass the Restore...

LOL HTML 安全漏洞

LOL HTML is a low output latency streaming HTML rewriter/parser from Cloudflare open source. A security vulnerability exists in LOL HTML versions prior to 1.1.1, which stems from the fact that lol-html can cause certain HTML input to crash...

Google Android elevation of privilege vulnerability (CNVD-2023-82066)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android, which can be exploited by an attacker to gain elevated privileges and execute arbitrary code on the system...

Yzmcms Cross-Site Request Forgery Vulnerability (CNVD-2023-64113)

Yzmcms is Yzmcms a set of open source CMS Content Management System. yzmcms 5.6 version of the cross-site request forgery vulnerability , the vulnerability stems from the program does not adequately verify whether the request comes from a trusted user , an attacker can use this vulnerability to...

Apache Airflow Input Validation Error Vulnerability (CNVD-2023-67067)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Drill Provider...

Design/Logic Flaw

PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions app/routes/v3/admin.controller.ts did not correctly verify whether the user was an administrator High Level or moderator Low Level causing the request to continue processing. The response...

CVE-2023-40020 Improper Authentication in PrivateUploader

PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions app/routes/v3/admin.controller.ts did not correctly verify whether the user was an administrator High Level or moderator Low Level causing the request to continue processing. The response...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which can be exploited by local attackers to cause a denial of service...

Yaklang Security Vulnerability

Yaklang is an open source programming language designed for network security by the yaklang.io Project. A security vulnerability exists in versions prior to Yaklang 1.2.4-sp1. Attackers can use the vulnerability to obtain sensitive information...

Linux Kernel Memory Misreference Vulnerability (CNVD-2023-65165)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a memory misreference vulnerability that originates from a confusion in net/sched/clsfw.c in the instruction responsible for freeing memory. An...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

[SECURITY] Fedora 38 Update: chromium-115.0.5790.170-1.fc38

Chromium is an open-source web browser, powered by WebKit Blink...

CrafterCMS is an open source headless CMS for enterprise-level websites and other content-driven digital experiences, especially those that are high-performance, large-scale and ultra-secure. CrafterCMS suffers from a cross-site scripting vulnerability in versions 3.1.0 through 3.1.27 and 4.0.0 through 4.0.2. The vulnerability is due to improper neutralization of inputs during page generation allowing for reflected XSS.No detailed vulnerability details are available at this time.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

SAP Message Server Authorization Issues Vulnerability

SAP Message Server is a message server application from SAP Germany. SAP Message Server is vulnerable to authorization issues, no details of the vulnerability are provided at this time...

Design/Logic Flaw

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the...