CVE-2024-31118

CVE-2024-31118 affects the WordPress plugin SP Project & Document Manager (versions up to 4.70). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, potentially enabling unauthorized access to project/document resources. Public sourc...

CVE-2024-30547

CVE-2024-30547 is a DOM-based Cross-Site Scripting vulnerability in the WordPress plugin “Header Image Slider” where improper neutralization of input during web page generation allows DOM-based XSS. Affected: Header Image Slider versions up to 0.3. Root cause determined in connected sources as im...

CVE-2023-50897

CVE-2023-50897 concerns the WordPress plugin Media File Renamer (WordPress plugin “Media File Renamer”). The vulnerability is described as an Unrestricted Upload of File with Dangerous Type that enables an attacker to perform an arbitrary file rename, which can lead to a Remote Code Execution (RC...

CVE-2021-26087

The CVE-2021-26087 entry documents a stored Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC web interfaces. Affected FortiWLC releases include 8.6.0, 8.5.3 and earlier, 8.4.8 and earlier, and 8.3.3. Root cause is improper neutralization of input during web page generation, enabling ...

CVE-2024-2878

Summary (CVE-2024-2878) : A DoS vulnerability in GitLab CE/EE affects all versions from 15.7 up to 16.9.7, 16.10 up to 16.10.5, and 16.11 up to 16.11.2. An attacker could cause service disruption by crafting unusual branch-name search terms. Impact: availability loss as described in the sources. ...

CVE-2022-28653

Canonical Apport , a toolkit used for collecting and feeding back error messages on Linux systems, is vulnerable to a disk space exhaustion attack. The flaw exists in versions prior to 2.21.0 , where users can consume unlimited disk space in the /var/crash directory. This vulnerability can lead t...

CVE-2018-9464

A missing permission check in multiple locations allows an attacker to read protected files, potentially leading to local escalation of privilege without requiring additional execution privileges or user interaction. This vulnerability specifically affects the Taimen bootloader component within t...

CVE-2023-47647

CVE-2023-47647 corresponds to a Missing Authorization (Broken Access Control) vulnerability in LearningTimes BadgeOS, affecting BadgeOS up to version 3.7.1.6. The issue originates from misconfigured access control levels, enabling unauthorized actions. Reported CVSS 3.1 base score 4.3 (Medium). C...

CVE-2023-47515

CVE-2023-47515 concerns the WordPress plugin “Seers – GDPR & CCPA Cookie Consent & Compliance”. Connected sources confirm a Missing Authorization/Broken Access Control issue affecting Seers versions up to 8.1.1, allowing unauthenticated access to configured security levels. The root cause is insu...

CVE-2023-45636

CVE-2023-45636 concerns the WordPress plugin WordPress Backup & Migration (wp-migration-duplicator)

CVE-2022-21505

CVE-2022-21505: In the Linux kernel IMA, enabling appraisal with ima_appraise=log can bypass lockdown on systems where Secure Boot is disabled or unavailable. IMA blocks ima_appraise=log via boot params when Secure Boot is enabled, but this protection does not cover lockdown used without Secure B...

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2023-47849

CVE-2023-47849 affects the BlossomThemes Email Newsletter WordPress plugin. The issue is a Missing Authorization / Broken Access Control in the bten_get_mailing_list workflow, allowing unauthenticated access to mailing list data for versions up to and including 2.2.4. The vulnerability’s CVSS v3....

CVE-2023-48286

CVE-2023-48286 concerns the WordPress Stripe Payments plugin (Accept Stripe Payments) ≤ 2.0.79, with a Missing Authorization/ Broken Access Control vulnerability due to incorrectly configured access controls. Public-facing unauthenticated users could potentially exploit the issue due to unauthent...

CVE-2018-9403

The Google Pixel smartphone is affected by a stack buffer overflow vulnerability in the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler located in the flp2hal_interface.c file. The root cause is a missing bounds check , which could allow an attacker to achieve local escalation of privilege in a priv...

CVE-2018-9395

A memory safety vulnerability exists in the Mediatek WLAN driver (specifically the MTK cfg80211 component) due to a missing bounds check in the mtk_cfg80211_vendor_packet_keep_alive_start and mtk_cfg80211_vendor_set_config functions located in drivers/misc/mediatek/connectivity/wlan/gen2/os/linux...

CVE-2018-9392

A security vulnerability exists in the GPS HAL component of Google Pixel and Nexus devices. The issue is caused by a missing bounds check in the get_binary function within vendor/mediatek/proprietary/hardware/connectivity/gps/gps_hal/src/data_coder.c, which leads to a possible out-of-bounds write...

CVE-2023-0163

Mozilla Convict (versions before 6.2.4 ) is vulnerable to a Prototype Pollution issue caused by improperly controlled modification of object prototype attributes. This allows an attacker to inject attributes used by other components or override existing attributes with incompatible types, potenti...

CVE-2022-43936

CVE-2022-43936 affects Brocade SANnav before v2.2.2. The root cause is that enabling debugging causes Fabric OS switch passwords to be logged, risking disclosure of sensitive credentials. Impact is limited to password exposure via logs; no other compromises described. Remediation: upgrade to v2.2...

CVE-2018-9371

A vulnerability exists in the Mediatek Preloader component of the Google Android bootloader. Due to an exposed interface with insufficient blacklisting or whitelisting, the system is susceptible to out of bounds reads and writes via arbitrary peripheral memory mapping. This flaw can lead to local...