7115 matches found
GO-2023-1840 Unsafe behavior in setuid/setgid binaries in runtime
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...
CVE-2020-36713
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'updateuserprofile' routes. This makes it possible for unauthenticated attackers to create new administrator accounts, delet...
CVE-2020-36713
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'updateuserprofile' routes. This makes it possible for unauthenticated attackers to create new administrator accounts, delet...
WordPress Plugin MStore API 访问控制错误漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2020-36713: Authentication Bypass Using an Alternate Path or Channel
The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted access to the 'register' and 'updateuserprofile' routes. This makes it possible for unauthenticated attackers to create new administrator accounts, delet...
WordPress Plugin Unauthenticated Account Creation 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
CVE-2022-33263
Memory corruption due to use after free in Core when multiple DCI clients register and deregister...
CVE-2022-33263
CVE-2022-33263 describes a memory corruption due to a use-after-free in the Core when multiple DCI clients register and deregister. Connected records place this in Qualcomm closed‑source components and note the issue affects the Core subsystem, with exploitation status not disclosed in the provid...
CVE-2022-33227 Double free in Linux-Android
Memory corruption in Linux android due to double free while calling unregister provider after register call...
CVE-2022-33227
CVE-2022-33227: Memory corruption in Linux-Android due to a double free when unregistering a provider after register. Affected component is Qualcomm GPS HLOS/Qualcomm chipsets under Android; root cause is a double free in the unregister path leading to memory corruption (impact: confidentiality, ...
CVE-2022-33227: Double Free
Memory corruption in Linux android due to double free while calling unregister provider after register call...
PT-2023-13272 · Qualcomm · Snapdragon +48
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to use after free in Core when multiple DCI clients register and deregister. No information is provided...
CLSA-2023-1685972217 Fix CVE(s): CVE-2023-2609
SECURITY UPDATE: NULL pointer dereference in getregister - debian/patches/CVE-2023-2609.patch: Check "yarray" is not NULL - CVE-2023-2609...
AZL-27061 CVE-2023-2598 affecting package kernel for versions less than 5.15.116.1-1
A flaw was found in the fixed buffer registration code for iouring iosqebufferregister in iouring/rsrc.c in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation...
CVE-2023-33974 RIOT-OS vulnerable to Race Condition in SFR Timeout
RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions...
luckyregister.com Cross Site Scripting vulnerability OBB-3365559
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-3468 · WordPress · Wordpress Social Login/Register
Name of the Vulnerable Software and Affected Versions: WordPress Social Login and Register plugin versions up to and including 7.6.4 Description: The issue is related to an authentication bypass in the WordPress Social Login and Register plugin. This is due to insufficient encryption on the user...
Agt Teknik Ceppatron SQL注入漏洞
Agt Teknik Ceppatron is a cash register device from Agt Teknik. Agt Teknik Ceppatron suffers from a SQL injection vulnerability that arises from the use of special elements that are not among and allow commands to be executed via SQL injection...
CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...