Archive
6 June 2023
Vulnerabilities first published on this day (UTC), newest first.
149 results · Feed
-
Medium 6.7
In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privile…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 4.4
In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…
-
Medium 6.7
In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wi…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Medium 6.4
In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privile…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wi…
-
Medium 6.7
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Low 3.5
Dahua Smart Parking Management image server-side request forgery
A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic. This vulnerability affects unknown code of the file /ipms/imageConvert/image. The manipulation of the argument fileUrl leads to server-side request …
-
Medium 6.3
SourceCodester Service Provider Management System view_service.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file view_service.php. The manipulation of the argument id leads to sql injection. It is possible to ini…
-
Medium 6.3
SourceCodester Service Provider Management System view.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unknown functionality of the file view.php. The manipulation of the argument id leads to sql injection. …
-
Medium 4.3
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited am…
-
High 8.8
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same accoun…
-
High 8.8
ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissio…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
High 7.8
Improper Access control in GPU Subsystem
Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
-
High 8.2
Buffer Over-read in WLAN HOST
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while parsing WLAN beacon or probe-response frame.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing FT Information Elements.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while processing frames with missing header fields.
-
High 7.5
Buffer Over-Read in WLAN Firmware
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.
-
High 7.8
Improper Input Validation in Audio
Memoru corruption in Audio when ADSP sends input during record use case.
-
High 7.8
Improper Input Validation in WLAN HOST
Memory corruption in WLAN HOST while receiving an WMI event from firmware.
-
High 8.4
Stack-based Buffer Overflow in Automotive GPU
Memory corruption in Automotive GPU while querying a gsl memory node.
-
High 8.4
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in modem while processing sib with incorrect values from network.
-
High 7.5
Improper authentication in Modem
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network.
-
Medium 6.2
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
-
High 7.1
Improper access control in Kernel
Memory corruption due to improper access control in kernel while processing a mapping request from root process.
-
High 7.1
Information Exposure in Linux Networking Firmware
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
-
High 7.1
Information exposure in Kernel
Information disclosure in Kernel due to indirect branch misprediction.
-
High 8.4
Double free in Linux Networking
Memory corruption in Linux Networking due to double free while handling a hyp-assign.