Archive
11 March 2024
Vulnerabilities first published on this day (UTC), newest first.
47 results · Clear filters · Feed
-
High 7.1
Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex
phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting (XSS) vulnerability that can be exploited via maliciously crafted user data. This was due to improper case-sensitivity in the code that was…
-
High 7.2
OS Command Injection Vulnerability in SOY CMS
SOY CMS is an open source CMS (content management system) that allows you to build blogs and online shops. SOY CMS versions prior to 3.14.2 are vulnerable to an OS Command Injection vulnerability within the file upload feature when accessed by an administrato…
-
High 7.5
Account Takeover via Session Fixation in Zitadel [Bypassing MFA]
Zitadel is an open source identity management system. Zitadel uses a cookie to identify the user agent (browser) and its user sessions. Although the cookie was handled according to best practices, it was accessible on subdomains of the ZITADEL instance. An at…
-
High 8.4
In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local e…
-
High 7.8
In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to…
-
High 8.4
In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
High 7.5
In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing nul…
-
High 8.4
In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local…
-
High 7.8
In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to lo…
-
High 8.4
In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead …
-
High 7.8
In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
High 7.8
In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due t…
-
High 8.4
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This co…
-
High 7.8
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
High 7.7
In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to loc…
-
High 7.8
In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loc…
-
High 8.4
there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege…
-
High 8.4
there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no…
-
High 7.5
there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure …
-
High 8.4
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege…
-
High 8.4
In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead …
-
High 8.4
In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could le…
-
High 7.8
In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to lo…
-
High 7.8
In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code.…
-
High 8.4
In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds chec…
-
High 8.4
In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escal…
-
High 7.8
In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could …
-
High 7.5
In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds ch…
-
High 7.1
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escal…
-
High 8.4
there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privile…
-
High 7.2
404 Solution < 2.35.8 - Admin+ SQL Injection
The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins.
-
High 7.8
Santesoft Sante FFT Imaging Out-of-bounds Write
In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could perform an out-of-bounds write, which could allow for arbitrary code execution.
-
High 7.1
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation c…
-
High 8.4
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to inc…
-
High 7.8
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local …
-
High 7.8
In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could le…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
High 7.5
In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could …
-
High 7.8CVE-2024-0044 Public exploit
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input vali…
-
High 7.8
Improper Error Handling Issue in LabVIEW
An improper error handling vulnerability in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.