CVE-2023-50373

CVE-2023-50373 affects the WordPress Alt Manager plugin (versions

CVE-2023-50876

CVE-2023-50876 is a missing authorization/vulnerability in the Molongui WordPress plugin, described as a broken access control that allows exploitation of incorrectly configured access control security levels. The issue affects Molongui versions from n/a up to 4.7.3. Public sources in the connect...

CVE-2023-50884

CVE-2023-50884 concerns LA-Studio Element Kit for Elementor. Affected: LA-Studio Element Kit for Elementor 1.1.5 per the PT Security advisory; details on exact fixed version are not specified beyond “later than 1.1.5.” Monitor for updates from official advisories for precise patched build.

CVE-2023-51362

CVE-2023-51362 affects the WordPress plugin All-in-one Floating Contact Form – My Sticky Elements (versions ≤ 2.1.3). It describes a Missing Authorization/ improper access control vulnerability with a CVSS v3.1 base score of 5.3 (Medium). Multiple connected sources corroborate a broken access con...

CVE-2023-49845

CVE-2023-49845 is a Broken Access Control vulnerability affecting the WordPress Redirects plugin (versions up to and including 1.2.1, Loud Dog Redirects naming in some sources). The root cause described across sources is “Missing Authorization” / incorrectly configured access control, enabling an...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9463

The vulnerability CVE-2018-9463 affects the touchscreen path in the Android kernel: In sw49408_irq_runtime_engine_debug (touch_sw49408.c), there is an out-of-bounds write caused by an incorrect bounds check. This can enable local privilege escalation with System execution privileges required and ...

CVE-2018-9462

CVE-2018-9462 describes an out-of-bounds write in the Android kernel component ftm4_pdc.c, within the store_cmd function, caused by an incorrect bounds check. This can enable local escalation of privilege to system execution privileges, with no user interaction required. The description specifies...

CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9404

The CVE-2018-9404 issue affects Google Pixel/Nexus devices and is centered on the oemCallback function in ril.cpp, where an out-of-bounds write can result from an integer overflow. This could enable local elevation of privilege with System execution privileges required, and exploitation does not ...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2018-9399

CVE-2018-9399 affects the /proc/driver/wmt_dbg driver. The issue is multiple possible out-of-bounds writes in this driver, enabling local escalation of privilege with SYSTEM privileges and no user interaction required. Reported impact is local (attack vector: LOCAL) with the potential for total c...

CVE-2018-9393

CVE-2018-9393 affects the MTK WLAN driver: a possible out-of-bounds write in procfile_write() of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c due to a missing bounds check. This can lead to local privilege escalation with System execution privileges; exploitation reportedly doe...

CVE-2018-9418

CVE-2018-9418 involves a possible stack buffer overflow in the Android kernel/user-space component described as dtif_rc.cc:handle_app_cur_val_response, caused by a missing bounds check. The Red Hat/NVD/CVE records align with the Android Pixel/Nexus security bulletin noting this issue as a Remote ...

CVE-2018-9413

CVE-2018-9413 affects Google Pixel devices (and Android components) via an out-of-bounds write in the function handling Bluetooth notifications: btif_rc.cc handle_notification_response. The issue enables remote code execution with no extra privileges, requiring user interaction for exploitation. ...

CVE-2018-9376

CVE-2018-9376 affects the Mediatek ECCCI Port RPC kernel code (drivers/misc/mediatek/eccci/port_rpc.c). The root cause is an incorrect bounds check that can lead to an out-of-bounds write. This may allow local escalation of privilege with System execution privileges, and exploitation does not req...

CVE-2018-9381

CVE-2018-9381 affects the gatt_sr.c component, specifically the gatts_process_read_by_type_req path, where uninitialized data can cause information disclosure. The issue enables remote information disclosure without additional execution privileges and requires no user interaction. Publicly disclo...

CVE-2018-9377

CVE-2018-9377 affects Android’s ActivityManagerService.getIntentForIntentSender, enabling local escalation of privilege via a pending Intent to access user metadata with no user interaction. The issue is tied to the getIntentForIntentSender path and can be exploited locally without extra privileg...