CVE-2024-31118

CVE-2024-31118 affects the WordPress plugin SP Project & Document Manager (versions up to 4.70). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, potentially enabling unauthorized access to project/document resources. Public sourc...

CVE-2024-30547

CVE-2024-30547 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Header Image Slider” where improper neutralization of input during web page generation allows DOM-based XSS. Affected: Header Image Slider versions up to 0.3. Root cause determined in connected sources as im...

CVE-2023-50897

CVE-2023-50897 concerns the WordPress plugin Media File Renamer (WordPress plugin “Media File Renamer”). The vulnerability is described as an Unrestricted Upload of File with Dangerous Type that enables an attacker to perform an arbitrary file rename, which can lead to a Remote Code Execution (RC...

CVE-2021-26087

The CVE-2021-26087 entry documents a stored Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC web interfaces. Affected FortiWLC releases include 8.6.0, 8.5.3 and earlier, 8.4.8 and earlier, and 8.3.3. Root cause is improper neutralization of input during web page generation, enabling ...

CVE-2024-2878

Summary (CVE-2024-2878) : A DoS vulnerability in GitLab CE/EE affects all versions from 15.7 up to 16.9.7, 16.10 up to 16.10.5, and 16.11 up to 16.11.2. An attacker could cause service disruption by crafting unusual branch-name search terms. Impact: availability loss as described in the sources. ...

CVE-2022-28653

A security vulnerability exists in Canonical Apport prior to version 2.21.0 . The flaw allows users to consume unlimited disk space in the /var/crash directory, which is used to collect and feed back error messages from application crashes. A vulnerability scanner identifies this as a package-lev...

CVE-2018-9464

CVE-2018-9464 is an Elevation of Privilege (EoP) vulnerability affecting the Taimen bootloader component within the Google Android Kernel . The root cause is a missing permission check in multiple locations, which allows an attacker to read protected files. This flaw can be exploited to achieve l...

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...

CVE-2023-45636

CVE-2023-45636 concerns the WordPress plugin WordPress Backup & Migration (wp-migration-duplicator)

CVE-2022-21505

CVE-2022-21505: In the Linux kernel IMA, enabling appraisal with ima_appraise=log can bypass lockdown on systems where Secure Boot is disabled or unavailable. IMA blocks ima_appraise=log via boot params when Secure Boot is enabled, but this protection does not cover lockdown used without Secure B...

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2023-47849

CVE-2023-47849 affects the BlossomThemes Email Newsletter WordPress plugin. The issue is a Missing Authorization / Broken Access Control in the bten_get_mailing_list workflow, allowing unauthenticated access to mailing list data for versions up to and including 2.2.4. The vulnerability’s CVSS v3....

CVE-2023-48286

CVE-2023-48286 concerns the WordPress Stripe Payments plugin (Accept Stripe Payments) ≤ 2.0.79, with a Missing Authorization/ Broken Access Control vulnerability due to incorrectly configured access controls. Public-facing unauthenticated users could potentially exploit the issue due to unauthent...

CVE-2018-9403

The Google Pixel smartphone is susceptible to a stack buffer overflow vulnerability in the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler located within flp2hal_interface.c. This issue is caused by a missing bounds check , which could allow an attacker to achieve local escalation of privilege in a ...

CVE-2018-9395

A possible out-of-bounds (OOB) write exists in the Mediatek WLAN driver due to a missing bounds check in the mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config functions within drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_vendor.c. This vulnerability could ...

CVE-2018-9392

A vulnerability exists in the GPS HAL of MediaTek components, specifically within the get_binary function of vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c. The issue is caused by a missing bounds check , leading to a possible out-of-bounds write . This flaw could ...

CVE-2023-0163

Mozilla Convict, a configuration management library for Node.js, is vulnerable to a Prototype Pollution vulnerability (CWE-1321 ) in versions before 6.2.4 . An attacker can inject attributes into other components or override existing attributes with incompatible types, potentially leading to a cr...

CVE-2022-43936

CVE-2022-43936 affects Brocade SANnav before v2.2.2. The root cause is that enabling debugging causes Fabric OS switch passwords to be logged, risking disclosure of sensitive credentials. Impact is limited to password exposure via logs; no other compromises described. Remediation: upgrade to v2.2...

CVE-2018-9371

A vulnerability exists in the Mediatek Preloader bootloader component used in Google Android devices. The root cause is an exposed interface that permits arbitrary peripheral memory mapping due to insufficient blacklisting or whitelisting. This flaw results in out-of-bounds reads and writes , whi...