Archive
January 2024
Vulnerabilities first published in this month (UTC), newest first.
1,235 results · Clear filters · Feed
-
Medium 4.9
Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx function if guest features VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1 and VIRTIO_NET_F_MRG_RXBUF are enabled. This could …
-
Medium 4.0
multimedia audio has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.
-
Medium 4.0
multimedia player has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
-
Medium 4.0
multimedia player has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.
-
Medium 4.0
multimedia camera has a UAF vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.
-
Medium 6.7
Integer Overflow or Wraparound in Radio Interface Layer
Memory corruption while receiving a message in Bus Socket Transport Server.
-
Medium 6.7
Double Free in Data Network Stack & Connectivity
Memory corruption when IPv6 prefix timer object`s lifetime expires which are created while Netmgr daemon gets an IPv6 address.
-
Medium 5.5
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds r…
-
Medium 6.7
In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to loca…
-
Medium 5.5
In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local info…
-
Medium 5.9
In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of se…
-
Medium 6.7
In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.7
In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local esc…
-
Medium 6.7
In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
Medium 6.7
In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of…
-
Medium 4.4
In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information…
-
Medium 4.4
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 4.4
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Medium 6.7
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Medium 4.7
RRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload.…
-
Medium 5.9
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF…
-
Medium 5.3
An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the…
-
Medium 5.5
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params functi…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first fu…
-
Medium 5.5
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_di…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in…
-
Medium 4.8
WP TripAdvisor Review Slider < 11.9 - Admin+ Stored XSS
The WP TripAdvisor Review Slider WordPress plugin before 11.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di…
-
Medium 6.1
Popup Builder < 4.2.3 - Unauthenticated Stored XSS
The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.
-
Medium 5.4
Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored C…
-
Medium 6.1
FlyCms through abbaa5a allows XSS via the permission management feature.