CVE-2023-24288

Simon Tatham's Portable Puzzle Collection (sgt-puzzles) is vulnerable to a buffer overrun triggered by a crafted save file, which can lead to Denial of Service . The vulnerability affects versions before 20230116.5782e29 . The CVSS 3.1 score is 2.9 (LOW) , with a local attack vector, high complex...

CVE-2023-37366

CVE-2023-37366 is a remote denial-of-service vulnerability in Samsung Exynos mobile, automotive, and modem processors (including Exynos 9810 through 2200, Modem 5123/5300, and Auto T5123). The root cause is in cd_parseMsg (file cd_codec.c) within the Shannon SM Task, where improper input validati...

CVE-2023-24283

Portable Puzzle Collection (sgt-puzzles) versions before 20230116.5782e29 contain a buffer overflow in the Guess puzzle component, triggered by a crafted save file, leading to a Denial of Service . The CVSS 3.1 score is 2.9 (Low) , with a local attack vector and high complexity. An upstream fix i...

CVE-2023-34854

HotelDruid before 3.0.6 is affected by insufficient file upload sanitation in the backup/restore function, enabling authenticated remote code execution (RCE) . The vulnerability requires high privileges and is network-based with high attack complexity, yielding a CVSS 3.1 score of 6.6 (MEDIUM) . ...

CVE-2020-9695

CVE-2020-9695 is an out-of-bounds write vulnerability in Adobe Acrobat/Reader. Affects multiple releases (e.g., Acrobat Reader versions 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earlier) and related Acrobat products. Root cause: out-of-bounds write in the affected code pa...

CVE-2020-9711

CVE-2020-9711 describes an out-of-bounds read (CWE-125) in Adobe Acrobat/Reader. Affected products include multiple lines of Acrobat/Reader: DC Continuous and Classic channels, across 2015, 2017, 2020 release families (e.g., 2020.009.20074, 2020.001.30002, 2017.011.30171, 2015.006.30523 and earli...

CVE-2020-9713

CVE-2020-9713 is an out-of-bounds read (CWE-125) in Adobe Acrobat and Reader. Affected are versions including 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier. The vulnerability could disclose sensitive memory and requires user interaction (vi...

CVE-2024-32729

CVE-2024-32729 concerns WordPress ChatBot Conversational Forms (QuantumCloud Conversational Forms for ChatBot)

CVE-2024-33685

Technical details for CVE-2024-33685 (WordPress Startupzy theme) are not publicly provided in the supplied documents. No confirmed affected versions, root cause, impact, or remediation are stated here; monitor official advisories for updates.

CVE-2022-44630

The CVE-2022-44630 entry pertains to the WordPress plugin YITH WooCommerce Product Slider Carousel (vulnerable:

CVE-2022-26758

The macOS Kernel is vulnerable to a memory corruption issue that allows a malicious application to cause unexpected changes in memory shared between processes. This flaw exists in macOS Monterey versions prior to 12.4 and is caused by insufficient state management. The issue was resolved with imp...

CVE-2023-42344

Alkacon OpenCMS versions prior to 10.5.1 (specifically research indicates 9.0.0 to 10.5.0 ) are vulnerable to an unauthenticated XML External Entity (XXE) attack. The root cause is improper limitation of XML links to external objects via the cmis-online/query endpoint on a Chemistry servlet . Exp...

CVE-2024-32537

CVE-2024-32537 is a CSRF vulnerability in the Flash Video Player plugin for WordPress (joshuae1974). Public description indicates the issue affects Flash Video Player versions from unspecified earliest through 5.0.4. Connected sources confirm a CSRF flaw; Red Hat and CVE feeds reiterate the same,...

CVE-2024-31088

CVE-2024-31088 affects WordPress plugin AdsPlace’r – Ad Manager, Inserter, AdSense Ads (WPShop.Ru AdsPlace’r) up to version 1.1.5. Vulnerability is DOM-based XSS due to improper input handling during web page generation, enabling cross-site scripting within the context of a user’s browser. Public...

CVE-2023-52210

CVE-2023-52210 concerns the WordPress plugin “Product Delivery Date for WooCommerce – Lite” (Tyche) with versions up to 2.7.0. Connected patchstack data indicates the root cause is broken access control that allows unauthenticated access, potentially impacting availability or operation. A fix is ...

CVE-2024-32832

The Hamid Alinia Login with phone number WordPress plugin (versions

CVE-2023-32246

CVE-2023-32246 refers to a race in ksmbd where rcu_barrier() is not invoked during module unload, potentially allowing unloading with pending RCU callbacks and unintended kernel code execution. Multiple sources indicate the vulnerability has been resolved in the Linux kernel; no exploitation deta...

CVE-2023-32256

The CVE-2023-32256 entry describes a race condition in the Linux kernel ksmbd component where a race between smb2 close and logoff on multichannel connections can cause a use-after-free. This affects the Linux kernel ksmbd implementation; the vulnerability details include the potential for a secu...

CVE-2014-6274

The git-annex tool (versions 3.20121126 through 5.20140919 ) contains a credential storage flaw affecting S3 and Glacier remotes. When embedcreds=yes is set alongside encryption=pubkey or encryption=hybrid, embedded AWS credentials are stored in the Git repository in effective plaintext instead o...

CVE-2024-4025

CVE-2024-4025 describes a DoS in GitLab CE/EE across all versions up to fixed points: 7.10–16.11.4, 17.0 prior to 17.0.3, and 17.1 prior to 17.1.1, triggered by processing a crafted Markdown page. The issue's impact is high (availability loss) per CVSS; no exploitation details are provided in the...