3228 matches found
Google Pixel Buffer Error Vulnerability
Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from an incorrect bounds check in protocoladapter.cpp's GetSizeOfEenlRecords, which may result in out-of-bounds reads...
Google Pixel Security Breach
Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability that stems from the presence of a logic error in the code that may not remove the DCK after restoring the factory settings...
Google Pixel Security Breach
Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of a missing permission check in ppcfw.c's ppcfwenable, which may result in elevation of privilege...
Google Pixel Security Breach
Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability that stems from the presence of a logic error in the code...
CVE-2023-40238
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address duri...
Pixel Update Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2023-12-05 or later address all issues in this bulletin and all issues in the December 2023 Android...
Google Pixel Security Breach
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from vulnerability to denial of service attacks...
Android Security Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-12-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
ASB-A-294854926
In multiple locations, there is a possible way to inject keystrokes due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-288366554
In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
SAHU TikTok Pixel for E-Commerce <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Description The SAHU TikTok Pixel for E-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2023-46642
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...
CVE-2023-46642
A vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce sahu-tiktok-pixel.This issue affects SAHU TikTok Pixel for E-Commerce: from n/a through = 1.2.2...
CVE-2023-46642
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...
CVE-2023-46642
CVE-2023-46642 affects the SAHU TikTok Pixel for E-Commerce WordPress plugin up to version 1.2.2. The issue is a stored Cross-Site Scripting (XSS) vulnerability that requires an authenticated admin-level (admin+) user to trigger. Root cause is insufficient input sanitization/output escaping in th...
WordPress Plugin SAHU TikTok Pixel for E-Commerce Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin SAHU TikTo...
PT-2023-30134 · Sahu · Sahu Tiktok Pixel For E-Commerce
Name of the Vulnerable Software and Affected Versions: SAHU TikTok Pixel for E-Commerce plugin versions prior to 1.2.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with admin+ authentication. This type of vulnerability allows an attacker ...
Android Security Bulletin—November 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-11-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
