6393 matches found
MediaTek Chip Security Breach
MediaTek chips are a variety of MediaTek chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which is caused due to an improper access control of the register interface in the bluetooth driver, which may allow read and write access to registers...
PT-2023-24040 · Unknown · Bluetooth Driver
Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to improper access control of the register interface in the Bluetooth driver, allowing possible read and write access to registers. This could lead to a local...
CVE-2023-39983
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices via the nsm-web application...
Configuration of ICA storage policy for Citrix Workspace app for Windows
By default, the ICA files are stored on the local disk for Citrix Workspace app for Windows with the version prior to 2106. Citrix Workspace app for Windows with version 2106 or later change the storage policy of ICA files, which will be stored on memory by default. The default behavior can be...
kernel: kernel info leak issue in pfkey_register
A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...
Foodiee Online Food Ordering Web Application 1.0.0 Cross Site Scripting
==================================================================================================================================== | Title : Foodiee - Online Food Ordering Web Application V1.0.0 XSS Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozil...
CVE-2023-39807
N.V.K.INTER CO., LTD. NVK iBSG v3.5 was discovered to contain a SQL injection vulnerability via the apasswd parameter at /portal/user-register.php...
MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
Description The plugin does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts. 1. Visit the Profiles Settings page for the plugin: MS LMS LMS Settings Profiles 2. Ensure that "Disable Instructor...
The vulnerability in the yank_copy_line function of the register.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the yankcopyline function in the register.c component of the Vim text editor is related to incorrect calculation of buffer size. Exploiting this vulnerability may allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...
WordPress Cartpauj Register Captcha Plugin <= 1.0.02 is vulnerable to Bypass Vulnerability
Software Cartpauj Register Captcha Type Plugin Vulnerable versions = 1.0.02 Fixed in 2.0.0 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-40673 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2347148519cf Credits qilin99 Require...
N.V.K.INTER iBSG SQL注入漏洞
N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which originates from a SQL injection vulnerability in the parameter apasswd in the file /portal/user-register.php...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect validator pruning due to missing register precision contamination...
CVE-2023-31091
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...
CVE-2023-31091
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...
CVE-2023-31091 WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pradeep Singh Dynamically Register Sidebars plugin = 1.0.1 versions...
CVE-2023-31091
CVE-2023-31091 affects the WordPress plugin Dynamically Register Sidebars (versions
WordPress plugin Dynamically Register Sidebars 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...
Google Wear OS Security Vulnerability
Google Wear OS is a Google-developed operating system from Google, Inc. designed for use in smartwatches, smart bands, and other wearable devices. Google Wear OS suffers from a security vulnerability that stems from an insecure PendingIntent in the registerServiceLocked module of...
The vulnerability of Intel microprogramming software, related to the leakage of information from vector registers, allows attackers to gain access to protected information.
The vulnerability of Intel microprogramming software is related to the leakage of information from vector registers. Exploiting this vulnerability can allow an attacker to gain access to protected information...
