CVE-2023-49858

CVE-2023-49858 refers to the WordPress Custom Login plugin. Affected versions are

CVE-2023-49850

CVE-2023-49850 – WordPress WP Simple HTML Sitemap : Affected plugin versions are ≤ 2.7. Root cause is broken access control due to missing authorization checks, allowing unauthenticated access to perform an unauthorized action. CVSS v3.1 base score is 5.3 (Medium) per Patchstack, and reports cons...

CVE-2023-49857

CVE-2023-49857 is a Missing Authorization/Broken Access Control vulnerability in the WordPress plugin Awesome Support . Affected versions are up to 6.1.7 ; unauthenticated users could exploit misconfigured access controls. The PatchStack entry confirms a fix in 6.1.8 . NVD/CVSS data show a 6.5 (M...

CVE-2023-50373

CVE-2023-50373 affects the WordPress Alt Manager plugin (versions

CVE-2023-50876

CVE-2023-50876 is a missing authorization/vulnerability in the Molongui WordPress plugin, described as a broken access control that allows exploitation of incorrectly configured access control security levels. The issue affects Molongui versions from n/a up to 4.7.3. Public sources in the connect...

CVE-2023-50884

CVE-2023-50884 concerns LA-Studio Element Kit for Elementor. Affected: LA-Studio Element Kit for Elementor 1.1.5 per the PT Security advisory; details on exact fixed version are not specified beyond “later than 1.1.5.” Monitor for updates from official advisories for precise patched build.

CVE-2023-51362

CVE-2023-51362 affects the WordPress plugin All-in-one Floating Contact Form – My Sticky Elements (versions ≤ 2.1.3). It describes a Missing Authorization/ improper access control vulnerability with a CVSS v3.1 base score of 5.3 (Medium). Multiple connected sources corroborate a broken access con...

CVE-2023-49845

CVE-2023-49845 is a Broken Access Control vulnerability affecting the WordPress Redirects plugin (versions up to and including 1.2.1, Loud Dog Redirects naming in some sources). The root cause described across sources is “Missing Authorization” / incorrectly configured access control, enabling an...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9463

A vulnerability exists in the Google Android Kernel component, specifically within the touchscreen driver. An incorrect bounds check in sw49408_irq_runtime_engine_debug of touch_sw49408.c can lead to an out of bounds write . An attacker with System execution privileges can exploit this to achieve...

CVE-2018-9462

A vulnerability exists in the Google Android Kernel component, specifically within the Touchscreen driver. An incorrect bounds check in the store_cmd function of ftm4_pdc.c can lead to an out-of-bounds write . This flaw allows for a local elevation of privilege (EoP) , requiring System execution ...

CVE-2018-9416

CVE-2018-9416 concerns memory corruption in the Linux kernel SCSI driver, specifically in sg_remove_scat (scsi/sg.c). The root cause is described as an unusual root cause leading to local escalation of privilege with System execution privileges needed; no user interaction required. Connected docu...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9407

CVE-2018-9407 : In emmc_rpmb_ioctl of emmc_rpmb.c there is a Missing Bounds Check, leading to potential information disclosure of kernel data. Connected sources confirm this issue on Google Pixel devices and reference the Android Pixel/Nexus security bulletin, which states that patch levels of 20...

CVE-2018-9404

A security vulnerability exists in Google Pixel smartphones caused by an integer overflow within the oemCallback function of ril.cpp. This flaw can result in an out-of-bounds write , potentially leading to a local escalation of privilege . Exploitation requires System execution privileges and doe...

CVE-2018-9402

CVE-2018-9402: A buffer overwrite in multiple functions of gl_proc.c due to a missing bounds check could lead to kernel privilege escalation. The issue is documented across several sources (NVD/Red Hat CNVD/CNNVD/CIRCL and related Android Pixel bulletin context) with no exploitation details provi...

CVE-2018-9399

The Google Pixel smartphone is affected by a vulnerability in the /proc/driver/wmt_dbg driver. Multiple out-of-bounds writes within this driver could allow an attacker to achieve local escalation of privilege to System execution privileges. Exploitation does not require user interaction, though h...

CVE-2018-9393

A missing bounds check in the procfile_write function of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/gl_proc.c leads to a possible out-of-bounds (OOB) write . This vulnerability affects the Linux kernel , specifically impacting MediaTek wlan components. Exploitation requires System exec...

CVE-2018-9418

CVE-2018-9418 involves a possible stack buffer overflow in the Android kernel/user-space component described as dtif_rc.cc:handle_app_cur_val_response, caused by a missing bounds check. The Red Hat/NVD/CVE records align with the Android Pixel/Nexus security bulletin noting this issue as a Remote ...

CVE-2018-9413

CVE-2018-9413 affects Google Pixel devices (and Android components) via an out-of-bounds write in the function handling Bluetooth notifications: btif_rc.cc handle_notification_response. The issue enables remote code execution with no extra privileges, requiring user interaction for exploitation. ...