SUSE CVE-2022-28748

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2964. Reason: This candidate is a reservation duplicate of CVE-2022-2964. Notes: All CVE users should reference CVE-2022-2964 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2021-0851

In the Android 12 security release notes, CVE-2021-0851 is listed under System with Type: ID and Severity: High. The provided connected document does not include a description of the root cause, affected component, or explicit remediation for this CVE. The notes indicate that Android 12 fixes iss...

CVE-2021-0801

CVE-2021-0801 is listed in the Android 12 security release notes under the Framework category with Type ID and Severity Moderate. The provided documents do not expose the exact root cause, affected subcomponent, exploit details, or remediation/patch information for this CVE. No public technical d...

CVE-2021-0780

Technical details for CVE-2021-0780 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-0756

CVE-2021-0756 appears in the Android 12 Security Release Notes under the System category with type ID (information disclosure) and a Moderate severity. The entry is listed among many issues fixed for Android 12; no specific affected device models, components, root cause, or remediation are provid...

CVE-2021-0738

Android 12 Framework contains CVE-2021-0738 (listed under Framework in the Android 12 Security Release Notes). It is categorized as Type: ID (Information Disclosure) with a Moderate severity, and references the Android bug ID A-188802680. The snippet does not provide the exact root cause, vulnera...

CVE-2021-0731

In the Android 12 release notes, CVE-2021-0731 is listed under the Framework section with Type: ID and Severity: Moderate (Ref: A-189122545). The connected document does not provide concrete technical details about the vulnerability (e.g., affected component, root cause, impact, or fix). No furth...

CVE-2021-0713

CVE-2021-0713 is listed in the Android 12 Security Release Notes under Media Framework as an Elevation of Privilege (EoP) vulnerability with Moderate severity. The notes do not provide exploit details for this CVE within this excerpt. It notes that Android 12 devices with a security patch level o...

CVE-2023-24058

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservationsave.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler Sep 6, 2022 Feature...

alf.io 跨站脚本漏洞

alf.io is open source ticket reservation system. A cross-site scripting vulnerability exists in versions prior to alf.io 2.0-M4-2301 that stems from the presence of cross-site scripting XSS...

CVE-2023-22494

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-20018. Reason: This candidate is a reservation duplicate of CVE-2016-20018. Notes: All CVE users should reference CVE-2016-20018 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-45614

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-4228. Reason: This candidate is a reservation duplicate of CVE-2022-4228. Notes: All CVE users should reference CVE-2022-4228 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

WordPress Restaurant Menu – Food Ordering System – Table Reservation Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)

Software Restaurant Menu – Food Ordering System – Table Reservation Type Plugin Vulnerable versions 2.3.6 Fixed in 2.3.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4657 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSI...

kernel: openvswitch: integer underflow leads to out-of-bounds write in reserve_sfa_size()

An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reservesfasize function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write...

CVE-2022-44147

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-16891. Reason: This candidate is a reservation duplicate of CVE-2019-16891. Notes: All CVE users should reference CVE-2019-16891 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2020-1441

CVE-2020-1441 is a Windows Spatial Data Service Elevation of Privilege vulnerability. The issue arises from improper handling of memory objects in Spatial Data Service, allowing a user who can log on to overwrite or modify protected files to gain elevated privileges on Windows 10 version 1903 (KB...

CVE-2022-28748

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2964. Reason: This candidate is a reservation duplicate of CVE-2022-2964. Notes: All CVE users should reference CVE-2022-2964 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2022-3776

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as formsaction, setoption...

CVE-2022-3776

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as formsaction, setoption...