Skip to content
OpenAdvisories

Archive

13 June 2024

Vulnerabilities first published on this day (UTC), newest first.

321 results · Feed

  • Medium 6.5

    WordPress SKU Label Changer For WooCommerce plugin <= 3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in NervyThemes SKU Label Changer For WooCommerce.This issue affects SKU Label Changer For WooCommerce: from n/a through 3.0.

  • Medium 5.3

    WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SendPress SendPress Newsletters.This issue affects SendPress Newsletters: from n/a through 1.23.11.6.

  • Medium 4.3

    WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Fat Rat Fat Rat Collect.This issue affects Fat Rat Collect: from n/a through 2.6.7.

  • Medium 6.5

    WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.

  • Medium 6.3

    WordPress Kingkong Board plugin <= 2.1.0.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Bryan Lee Kingkong Board.This issue affects Kingkong Board: from n/a through 2.1.0.2.

  • Medium 5.4

    WordPress Sublanguage plugin <= 2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Maxime Schoeni Sublanguage.This issue affects Sublanguage: from n/a through 2.9.

  • Medium 5.3

    WordPress WP Dummy Content Generator plugin <= 2.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Deepak anand WP Dummy Content Generator.This issue affects WP Dummy Content Generator: from n/a through 2.3.0.

  • Medium 5.5

    CVE

    NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.

  • Medium 6.3

    CVE

    NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of serv…

  • Medium 5.5

    CVE

    NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service.

  • High 7.8

    CVE

    NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileg…

  • High 7.8

    CVE

    NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privi…

  • Medium 5.5

    CVE

    NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.

  • Medium 6.5

    CVE

    NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.

  • High 7.8

    CVE

    NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tamperi…

  • High 7.8

    CVE

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and…

  • High 7.8

    CVE

    NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and d…

  • Medium 4.3

    CVE

    NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, …

  • Medium 5.4

    CVE

    NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure.

  • Medium 5.5

    there is a possible information disclosure due to side channel information disclosure. This could lead to local informa…

  • Medium 4.0

    there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of se…

  • High 8.8

    In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Th…

  • Medium 5.5

    In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could…

  • High 7.5

    In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the c…

  • High 7.4

    In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds …

  • High 7.4

    In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic e…

  • High 7.1

    In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could le…

  • Medium 6.1

    Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initializat…

  • High 7.1

    In pl330_dma_from_peri_start() of fp_spi_dma.c, there is a possible out of bounds write due to a missing bounds check. …

  • High 7.8

    In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This c…

  • Medium 5.9

    In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could l…

  • High 7.5

    There is a possible escalation of privilege due to improperly used crypto. This could lead to remote escalation of priv…

  • Medium 4.3

    In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a miss…

  • Medium 5.5

    In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to…

  • Critical 9.8

    In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This c…

  • Medium 5.5

    there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead…

  • High 7.8

    In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of…

  • Medium 5.5

    In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to…

  • High 8.4

    In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to loca…

  • High 8.1

    In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…