Archive
4 March 2024
Vulnerabilities first published on this day (UTC), newest first.
38 results · Clear filters · Feed
-
Medium 5.0
An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious…
-
Medium 5.1
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, loc…
-
Medium 4.7
SourceCodester Online Tours & Travels Management System HTTP POST Request expense_category.php sql injection
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expense_category.php of the component HTTP POST Request Handler. The ma…
-
Medium 4.3
Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure
The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).
-
Medium 6.5
Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access
The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. dra…
-
Medium 4.0
ALSA: rawmidi - fix the uninitalized user_pversion
In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized for the user space file structure in the open function, because the file private structure use kmalloc f…
-
Medium 6.1
IBM CICS TX cross-site scripting
IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. …
-
Medium 5.3
IBM CICS TX information disclosure
IBM CICS TX Advanced 10.1 could disclose sensitive information to a remote attacker due to observable discrepancy in HTTP responses. IBM X-Force ID: 260814.
-
Medium 6.1
Forcepoint NGFW Security Management Center Management Server has SMC Downloads optional feature to offer standalone Man…
-
Medium 5.3
IBM Security Verify Privilege On-Premises information disclosure
IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 240453.
-
Medium 5.5
Buffer Over-read in Audio
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
-
Medium 5.1
Buffer Over-read in DSP Services
Information Disclosure while processing IOCTL request in FastRPC.
-
Medium 4.3
Huks has an insecure storage of sensitive information vulnerability
in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.
-
Medium 4.0
Background task manager has an improper preservation of permissions vulnerability
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through improper preservation of permissions.
-
Medium 4.3
Wlan has a use after free vulnerability
in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through use after free.
-
Medium 6.7
In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escala…
-
Medium 4.4
In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclo…
-
Medium 4.4
In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local informatio…
-
Medium 6.7
In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of…
-
Medium 6.7
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privil…
-
Medium 4.4
In da, there is a possible information disclosure due to improper input validation. This could lead to local informatio…
-
Medium 6.6
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privil…
-
Medium 4.2
In da, there is a possible information disclosure due to improper input validation. This could lead to local informatio…
-
Medium 6.7
In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privi…
-
Medium 6.0
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of pr…
-
Medium 6.7
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of pr…
-
Medium 6.7
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation o…
-
Medium 5.9
In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of ser…
-
Medium 4.4
In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local informatio…
-
Medium 6.3
SourceCodester Best POS Management System admin_class.php sql injection
A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin_class.php. The manipulation of the argument img leads to sql injection. It is possible to launch …
-
Medium 4.3
SourceCodester Best POS Management System index.php file inclusion
A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initia…
-
Medium 6.3
SourceCodester Online Mobile Management Store view_product.php sql injection
A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file view_product.php. The manipulation of the argument id leads to sql injection. The attack can be…
-
Medium 6.3
SourceCodester Online Mobile Management Store view_order.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /admin/orders/view_order.php. The manipulation of the argument id leads to sql injection. It is possibl…
-
Medium 4.7
SourceCodester Online Mobile Management Store manage_product.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Mobile Management Store 1.0. Affected by this issue is some unknown functionality of the file /admin/product/manage_product.php. The manipulation of the argument id lea…
-
Medium 4.3CVE-2023-49969 Public exploit
Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_su…
-
Medium 6.1
A Cross-site scripting (XSS) vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORT…
-
Medium 6.1
Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'
-
Medium 6.1
Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."