CVE-2023-20604

In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067...

CVE-2023-20608

In display drm, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363599; Issue ID: ALPS07363599...

CVE-2023-20602

In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107...

CVE-2023-20610

In display drm, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363469; Issue ID: ALPS07363469...

CVE-2022-32663

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

CVE-2022-32654

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705011; Issue ID: GN20220705011...

CVE-2022-32655

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220705028; Issue ID: GN20220705028...

CVE-2022-32643

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32643

In ccd, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07341261; Issue ID: ALPS07341261...

CVE-2022-32663

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220720014; Issue ID: GN20220720014...

CVE-2023-20619

The CVE-2023-20619 entry concerns the vcu component, with a memory corruption issue caused by improper locking. The vulnerability enables local escalation of privileges to System execution level and does not require user interaction. A patch is identified as ALPS07519159 (Issue ALPS07519159). Pub...

CVE-2022-32655

CVE-2022-32655 affects MediaTek Wi‑Fi driver components (e.g., MT5221, MT7603/7613, MT7615, MT7622/7628/7629, MT7663/7668, MT7682/7686/7687, MT7697, MT7902/7915/7916/7921, MT7981/7986, MT8167S, MT8175, MT8362A/8365, MT8385, MT8518S/8532, MT8695/8696/8788). The issue is reported as an undefined be...

CVE-2021-31577

The connected records confirm CVE-2021-31577 affects Boa, caused by a missing permission check that allows remote privilege escalation from a proximal attacker without extra privileges or user interaction. The vulnerability is treated as a high-severity issue (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:...

CVE-2021-31574

CVE-2021-31574 is a command-injection vulnerability in the product component named Config Manager caused by improper input validation. It allows remote escalation of privilege from a proximal attacker without requiring additional execution privileges and without user interaction, per the provided...

CVE-2023-20614

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628615; Issue ID: ALPS07628615...

Sql injection

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch is identified as 1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7. It is recommended to apply a patch to fix this issue. VDB-218898 is the identifi...

PT-2023-15903 · Mycms · Mycms

Name of the Vulnerable Software and Affected Versions: MyCMS affected versions not specified Description: A problematic issue was found in MyCMS, affecting the build view function of the file lib/gener/view.php in the Visitors Module. The manipulation of the original/converted argument leads to...

CVE-2015-10057 Little Apps Little Software Stats Password Reset class.securelogin.php access control

A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file inc/class.securelogin.php of the component Password Reset Handler. The manipulation leads to improper access controls. The...

PT-2023-10223 · Unknown · Gophergala Sqldump

Name of the Vulnerable Software and Affected Versions: gophergala sqldump affected versions not specified Description: A critical vulnerability was found in gophergala sqldump, leading to sql injection. The manipulation affects unknown code. Recommendations: Apply a patch to fix this issue,...

Sql injection

A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of the file ingame/roulette.php. The manipulation of the argument gambleMoney leads to sql injection. The patch is identified as 0a60b31271d4cbf8babe4be993d2a3a1617f0897. It is...