3587 matches found
CVE-2018-9406
CVE-2018-9406 concerns a vulnerability in NlpService where a missing permission check could allow access to location information, enabling local privilege escalation without additional execution privileges. The exploit requires only local access and does not require user interaction. Affected com...
CVE-2018-9464
CVE-2018-9464 is an Elevation of Privilege (EoP) vulnerability affecting the Taimen bootloader component within the Google Android Kernel . The root cause is a missing permission check in multiple locations, which allows an attacker to read protected files. This flaw can be exploited to achieve l...
CVE-2018-9434
A flaw in Android's Binder IPC allows applications to craft Parcels where binder-object metadata overlaps with string data. During unmarshalling, the kernel inserts genuine kernel pointers into attacker-controlled buffers. These pointers can be leaked back through services like the clipboard, res...
CVE-2018-9382
A missing permission check in multiple functions of WifiServiceImpl.java allows for the activation of a Wi-Fi hotspot from a non-owner profile. This vulnerability enables a local escalation of privilege without requiring additional execution privileges or user interaction. The issue specifically ...
CVE-2018-9379
The MiniThumbFile.java component in Google Pixel and Google Nexus smartphones contains a confused deputy vulnerability in multiple functions. This flaw allows an attacker to view thumbnails of deleted photos, leading to local information disclosure without requiring additional execution privilege...
CVE-2018-9383
A buffer overflow vulnerability exists in the asn1_ber_decoder function of asn1_decoder.c , caused by a lack of bounds checking. This flaw can lead to out-of-bounds reads of memory, potentially resulting in local information disclosure . Exploitation requires System execution privileges and does ...
CVE-2025-23833
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows DOM-Based XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...
CVE-2025-23916 WordPress WP Meetup plugin <= 2.3.0 - Settings Change vulnerability
Missing Authorization vulnerability in Nuanced Media WP Meetup wp-meetup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meetup: from n/a through = 2.3.0...
WordPress Links/Problem Reporter plugin <= 2.6.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Links/Problem Reporter versions = 2.6.0...
WordPress Links/Problem Reporter plugin <= 2.6.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Links/Problem Reporter versions = 2.6.0...
PT-2025-5130
Name of the Vulnerable Software and Affected Versions RaminMT Links/Problem Reporter versions n/a through 2.6.0 Description The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This means that an attacker could potentially inject...
CVE-2025-23833: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RaminMT Links/Problem Reporter report-broken-links allows DOM-Based XSS.This issue affects Links/Problem Reporter: from n/a through = 2.6.0...
WordPress plugin Links/Problem Reporter cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
BIT-PHP-MIN-2024-5458 Filter bypass in filter_var (FILTER_VALIDATE_URL)
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, due to a code logic error, filtering functions such as filtervar when validating URLs FILTERVALIDATEURL for certain types of URLs the function will result in invalid user information username + password part of URLs being...
CVE-2025-22138
CVE-2025-22138 concerns @codidact/qpixel, an open-source Q&A platform. Affected versions allow information exposure when a category is private or has limited visibility: suggested edits in that category can be viewed by unprivileged or anonymous users via the suggested edit queue. This constitute...
CVE-2024-56788
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oatc6: fix tx skb race condition between reference pointers There are two skb pointers to manage tx skb's enqueued from n/w stack. waitingtxskb pointer points to the tx skb which needs to be processed and...
CVE-2024-55916
The CVE-2024-55916 entry refers to a Linux kernel race where the KVP/VSS daemon may run before the VMBus ringbuffer is fully initialized. Concrete detail: a NULL pointer dereference can occur in hv_pkt_iter_first when the daemon opens / dev/vmbus/hv_kvp and registers before vmbus_open() completes...
CVE-2024-27980
CVE-2024-27980 affects Node.js where improper handling of batch files in child_process.spawn/spawnSync allows a malicious command line argument to inject arbitrary commands and achieve code execution even when shell is not enabled. The issue is documented across multiple feeds (Node.js CVE entry,...
CVE-2024-27980
Due to the improper handling of batch files in childprocess.spawn / childprocess.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled...