Archive
7 November 2023
Vulnerabilities first published on this day (UTC), newest first.
26 results · Clear filters · Feed
-
High 7.5
Samba: ad dc password exposure to privileged users and rodcs
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs). This flaw allows RODCs and users possessing the GET_CHANGES right to acces…
-
High 7.4
Server-Side Request Forgery in groupoffice
Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery (SSRF) vulnerability in the /api/upload.php endpoint. The /api/upload.php endpoint does not filter URLs which allows a malicious user to cause…
-
High 7.6
WordPress Export Users Data CSV Plugin <= 2.1 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This issue affects Export Users Data CSV: from n/a through 2.1.
-
High 7.8
Mali GPU Kernel Driver allows improper GPU memory processing operations
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
-
High 7.8
Mali GPU Kernel Driver exposes sensitive data from freed memory
A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to gain access to already freed memory.
-
High 7.8
An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat…
-
High 8.8
WordPress KB Support Plugin <= 1.5.84 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Support: from n/a through 1.5.84.
-
High 8.8
WD WidgetTwitter <= 1.0.9 - Authenticated (Contributor+) SQL Injection via Shortcode
The WD WidgetTwitter plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.0.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL quer…
-
High 7.1
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean plugin <= 1.6 versions.
-
High 8.4
An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to caus…
-
High 8.4
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause o…
-
High 8.4
Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary co…
-
High 8.4
Use After Free in Audio
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory corruption in Audio while processing the VOC packet data from ADSP.
-
High 7.5
NULL Pointer dereference in WLAN Firmware
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
-
High 7.8
Buffer Copy Without Checking Size of Input in Audio
Memory Corruption in Audio while invoking callback function in driver from ADSP.
-
High 7.5
Buffer over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing t2lm buffers.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS in WLAN Firmware while parsing no-inherit IES.
-
High 7.8
Buffer Copy Without Checking Size of Input in Automotive Audio
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
-
High 7.1
Improper Authorization in HLOS
Cryptographic issue in HLOS during key management.
-
High 8.2
Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
Memory corruption in TZ Secure OS while loading an app ELF.
-
High 8.4
Improper Authentication in Core
Memory Corruption in Core due to secure memory access by user while loading modem image.
-
High 8.8
RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged…
-
High 7.5
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
-
High 7.5
An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat ap…