6393 matches found
CVE-2022-33227 Double free in Linux-Android
Memory corruption in Linux android due to double free while calling unregister provider after register call...
CVE-2022-33227
CVE-2022-33227: Memory corruption in Linux-Android due to a double free when unregistering a provider after register. Affected component is Qualcomm GPS HLOS/Qualcomm chipsets under Android; root cause is a double free in the unregister path leading to memory corruption (impact: confidentiality, ...
PT-2023-13272 · Qualcomm · Snapdragon +48
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to use after free in Core when multiple DCI clients register and deregister. No information is provided...
CLSA-2023-1685972217 Fix CVE(s): CVE-2023-2609
SECURITY UPDATE: NULL pointer dereference in getregister - debian/patches/CVE-2023-2609.patch: Check "yarray" is not NULL - CVE-2023-2609...
AZL-27061 CVE-2023-2598 affecting package kernel for versions less than 5.15.116.1-1
A flaw was found in the fixed buffer registration code for iouring iosqebufferregister in iouring/rsrc.c in the Linux kernel that allows out-of-bounds access to physical memory beyond the end of the buffer. This flaw enables full local privilege escalation...
CVE-2023-33974 RIOT-OS vulnerable to Race Condition in SFR Timeout
RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions...
luckyregister.com Cross Site Scripting vulnerability OBB-3365559
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-3468 · WordPress · Wordpress Social Login/Register
Name of the Vulnerable Software and Affected Versions: WordPress Social Login and Register plugin versions up to and including 7.6.4 Description: The issue is related to an authentication bypass in the WordPress Social Login and Register plugin. This is due to insufficient encryption on the user...
Agt Teknik Ceppatron SQL注入漏洞
Agt Teknik Ceppatron is a cash register device from Agt Teknik. Agt Teknik Ceppatron suffers from a SQL injection vulnerability that arises from the use of special elements that are not among and allow commands to be executed via SQL injection...
CVE-2023-23706 WordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in miniOrange WordPress Social Login and Register Discord, Google, Twitter, LinkedIn plugin = 7.5.14 versions...
CVE-2023-23706
CVE-2023-23706 affects the WordPress plugin MiniOrange WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) , specifically versions
WordPress plugin WordPress Social Login and Register 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WordPress Social Login and...
kernel: regmap: spi: Reserve space for register address/padding
In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the maxrawread and maxrawwrite limits in regmapspi struct do not take into account the additional size of the transmitted register address and padding. This may...
Medium: kernel
Issue Overview: bpf: incorrect verifier pruning due to missing register precision taints, which may lead to out-of-band read/write access due to an incorrect verifier conclusion. CVE-2023-2163 A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the...
File Tracker Manager System SQL Injection Vulnerability
File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...
WordPress WP Register Profile With Shortcode Plugin <= 3.5.8 is vulnerable to Cross Site Scripting (XSS)
Software WP Register Profile With Shortcode Type Plugin Vulnerable versions = 3.5.8 Fixed in 3.5.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23818 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a5f4f1aaab08 Credits Rio...
File Tracker Manager System SQL注入漏洞
File Tracker Manager System is a file tracker manager system. File Tracker Manager System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter newpassword in the file register/updatepassword.php against externally entered SQL statements. A...
PT-2023-20626 · Unknown · Sourcecodester File Tracker Manager System
Name of the Vulnerable Software and Affected Versions: SourceCodester File Tracker Manager System version 1.0 Description: A critical issue was found in the SourceCodester File Tracker Manager System. This issue affects the file register/update password.php of the component POST Parameter Handler...
register-here.com Cross Site Scripting vulnerability OBB-3315237
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
