🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-21111 ‼

In several functions of PhoneAccountRegistrar.java, there is a possible way to prevent an access to emergency services due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-256819769

📖 Read

via "National Vulnerability Database".

149 views00:29

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20696 ‼

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).

📖 Read

via "National Vulnerability Database".

137 views00:29

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20700 ‼

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304.

📖 Read

via "National Vulnerability Database".

135 views00:29

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-31131 ‼

Greenplum Database (GPDB) is an open source data warehouse based on PostgreSQL. In versions prior to 6.22.3 Greenplum Database used an unsafe methods to extract tar files within GPPKGs. greenplum-db is vulnerable to path traversal leading to arbitrary file writes. An attacker can use this vulnerability to overwrite data or system files potentially leading to crash or malfunction of the system. Any files which are accessible to the running process are at risk. All users are requested to upgrade to Greenplum Database version 6.23.2 or higher. There are no known workarounds for this vulnerability.

📖 Read

via "National Vulnerability Database".

129 views00:29

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20719 ‼

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629583; Issue ID: ALPS07629583.

📖 Read

via "National Vulnerability Database".

124 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-0877 ‼

Product: AndroidVersions: Android SoCAndroid ID: A-273754094

📖 Read

via "National Vulnerability Database".

121 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20705 ‼

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767870; Issue ID: ALPS07767870.

📖 Read

via "National Vulnerability Database".

126 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-2124 ‼

An out-of-bounds memory access flaw was found in the Linux kernelâ€™s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.

📖 Read

via "National Vulnerability Database".

123 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20711 ‼

In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07581668; Issue ID: ALPS07581668.

📖 Read

via "National Vulnerability Database".

129 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20701 ‼

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270.

📖 Read

via "National Vulnerability Database".

133 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20720 ‼

In pqframework, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629586; Issue ID: ALPS07629586.

📖 Read

via "National Vulnerability Database".

138 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-21102 ‼

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel

📖 Read

via "National Vulnerability Database".

142 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-21106 ‼

In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-265016072References: Upstream kernel

📖 Read

via "National Vulnerability Database".

149 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20695 ‼

In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only); Issue ID: ALPS07734012 / ALPS07874363 (For MT6880, MT6890, MT6980 and MT6990 only).

📖 Read

via "National Vulnerability Database".

164 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20717 ‼

In vcu, there is a possible leak of dma buffer due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645185; Issue ID: ALPS07645185.

📖 Read

via "National Vulnerability Database".

185 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-21118 ‼

In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-269014004

📖 Read

via "National Vulnerability Database".

214 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-21104 ‼

In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-259938771

📖 Read

via "National Vulnerability Database".

269 views00:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20707 ‼

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628556; Issue ID: ALPS07628556.

📖 Read

via "National Vulnerability Database".

309 views00:35

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-20704 ‼

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767826; Issue ID: ALPS07767826.

📖 Read

via "National Vulnerability Database".

352 views00:35

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-2708 ‼

The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the â€˜search_termâ€™ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

📖 Read

via "National Vulnerability Database".

390 views05:30

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2023-2710 ‼

The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

📖 Read

via "National Vulnerability Database".

❤1

433 views05:30

About

Blog

Apps

Platform