CVE-2024-34620

Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service...

CVE-2024-34609

Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34607

Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34604

Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34604

Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

CVE-2024-34620

Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service...

CVE-2024-34605

Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background...

kernel: blk-cgroup: fix list corruption from reorder of WRITE ->lqueued

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRITE -lqueued blkcgrstatflush can be run anytime, especially when blkcgroupbiostart is being executed. If WRITE of -lqueued is re-ordered with READ of 'bisc-lnode.next' in the loop...

PT-2024-26023 · Unknown · Paymentmanagerservice

Name of the Vulnerable Software and Affected Versions: PaymentManagerService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in the PaymentManagerService, allowing local attackers to bypass restrictions on starting services from the background...

PT-2024-26024 · Unknown · Voicenoteservice

Name of the Vulnerable Software and Affected Versions: VoiceNoteService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in the VoiceNoteService, allowing local attackers to bypass restrictions on starting services from the background...

PT-2024-26022 · Samsung · Samsungnotesservice

Name of the Vulnerable Software and Affected Versions: SamsungNotesService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungNotesService, allowing local attackers to bypass restrictions on starting services from the background. This...

PT-2024-26020 · Samsung · Samsunghealthservice

Name of the Vulnerable Software and Affected Versions: SamsungHealthService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungHealthService, allowing local attackers to bypass restrictions on starting services from the background...

PT-2024-26019 · Unknown · Ledcoverservice

Name of the Vulnerable Software and Affected Versions: LedCoverService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in the LedCoverService, allowing local attackers to bypass restrictions on starting services from the background...

The vulnerabilities of the functions sbi_cpu_start() and cpu_update_secondary_bootdata() in the Linux operating system’s kernel on RISC-V processors allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions sbicpustart in the module arch/riscv/kernel/cpuopssbi.c and cpuupdatesecondarybootdata in the module arch/riscv/kernel/cpuopsspinwait.c in the Linux operating system’s kernel on RISC-V processors is related to memory writing beyond the allocated buffer...

UBUNTU-CVE-2024-7527

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

CVE-2024-7527

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

CVE-2024-33980

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/printreport.php'...

CVE-2024-33980

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/printreport.php'...

CVE-2024-33981

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/index.php'...

CVE-2024-33981

Cross-Site Scripting XSS vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could create a specially crafted URL and send it to a victim to obtain details of their session cookie via the 'start' parameter in '/admin/modreports/index.php'...