Archive
May 2023
Vulnerabilities first published in this month (UTC), newest first.
1,208 results · Clear filters · Feed
-
Medium 6.7
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privi…
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 5.5
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 6.7
In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation o…
-
Medium 6.7
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege w…
-
Medium 5.5
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 5.5
In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 6.7CVE-2023-20696 Public exploit
In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 6.7
In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati…
-
Medium 6.7
In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 4.4
In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 5.5
In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resou…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 4.4
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informati…
-
Medium 6.7
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.3
SourceCodester Lost and Found Information System GET Parameter sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Lost and Found Information System 1.0. Affected by this issue is some unknown functionality of the file admin/?page=items/view_item of the component GET Parameter Handler. The…
-
Medium 6.3
SourceCodester Lost and Found Information System GET Parameter sql injection
A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=items/manage_item of the component GET Parameter Handler. The manipula…
-
Medium 6.3
SourceCodester Online Exam System POST Parameter data sql injection
A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sql i…
-
Medium 6.3
SourceCodester Online Exam System POST Parameter data sql injection
A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] l…
-
Medium 6.3
SourceCodester Online Exam System POST Parameter data sql injection
A vulnerability was found in SourceCodester Online Exam System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /kelas/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] le…
-
Medium 6.3
SourceCodester Online Exam System POST Parameter data sql injection
A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns[1][data] leads to sq…
-
Medium 6.3
SourceCodester Online Exam System POST Parameter data sql injection
A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns[1…
-
Medium 6.3
SourceCodester Personnel Property Equipment System GET Parameter returned_reuse_form.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Personnel Property Equipment System 1.0. This issue affects some unknown processing of the file admin/returned_reuse_form.php of the component GET Parameter Handler. The manip…
-
Medium 6.3
SourceCodester Billing Management System GET Parameter editproduct.php sql injection
A vulnerability classified as critical was found in SourceCodester Billing Management System 1.0. This vulnerability affects unknown code of the file editproduct.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql inje…
-
Medium 5.2
Planet's secret file is created with excessive permissions
Planet is software that provides satellite data. The secret file stores the user's Planet API authentication information. It should only be accessible by the user, but before version 2.0.1, its permissions allowed the user's group and non-group to read the fi…
-
Medium 4.4
IBM Spectrum Protect Plus Server information disclosure
IBM Spectrum Protect Plus Server 10.1.13, under specific configurations, could allow an elevated user to obtain SMB credentials that may be used to access vSnap data stores. IBM X-Force ID: 249325.
-
Medium 6.5
IBM Security Verify Access denial of service
IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635.
-
Medium 5.9
WordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.
-
Medium 5.9
WordPress Easy Ad Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodeSolz Easy Ad Manager plugin <= 1.0.0 versions.
-
Medium 5.9
WordPress Simple Tooltips Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Justin Saad Simple Tooltips plugin <= 2.1.4 versions.
-
Medium 5.9
WordPress ApexChat Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ApexChat plugin <= 1.3.1 versions.
-
Medium 5.9
WordPress Panorama – WordPress Project Management Plugin Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SnapOrbital Panorama plugin <= 1.5 versions.
-
Medium 6.5
WordPress Button Builder – Buttons X Plugin <= 0.8.6 is vulnerable to Cross Site Scripting (XSS)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gautam Thapar Button Builder – Buttons X plugin <= 0.8.6 versions.
-
Medium 6.7
Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to p…
-
Medium 6.7
Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authent…