CVE Vulnerability Catalog

Vulnerability related to insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may lead to malicious modification and overwriting of ServiceWifiResources.

Vulnerability related to insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may lead to malicious modification and overwriting of OsuLogin.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may lead to home screen unavailability.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may lead to home screen unavailability.

Vulnerability related to incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally.

The vulnerability in the AMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may compromise apps' data security.

There is an input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.

There is a permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally.

Potential buffer overflow vulnerabilities exist in several locations within the Zephyr project's source code, particularly in files related to USB handling.

The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to and including 5.7.4 due to insufficient restriction on the 'wpdmpp_update_profile' function. This allows authenticated attackers with minimal permissions, such as a subscriber, to modify their user role.

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to and including 3.0.4 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allow_url_include is enabled.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. Prior to versions 2.9.1 and 2.6.5, improper validation of sequence numbers may lead to remotely reachable assertion failure.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.10.0 and 2.6.5, the `BadParamException` thrown by Fast CDR is not caught in Fast DDS, which can remotely crash any Fast DDS process.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.11.1, 2.10.2, 2.9.2, and 2.6.6, malformed `PID_PROPERTY_LIST` parameters can cause heap overflow at a different program counter, potentially crashing any Fast-DDS process remotely.

eprosima Fast DDS prior to versions 2.11.1, 2.10.2, 2.9.2, and 2.6.6 is vulnerable to heap overflow caused by the PID_PROPERTY_LIST parameter containing a CDR string longer than the actual content size. This vulnerability can lead to remote crashes of any Fast-DDS process.

In eprosima Fast DDS, prior to versions 2.11.0, 2.10.2, 2.9.2, and 2.6.5, a vulnerability exists that raises an unhandled `BadParamException` in fastcdr, leading to a crash of fastdds.

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard. In versions prior to 2.10.0, 2.9.2, and 2.6.5, a malformed GAP submessage can trigger assertion failure, crashing FastDDS.

A buffer overflow vulnerability in the cFilenameInit parameter of the browseForDoc function in Foxit PDF Reader 10.1.0.37527 allows local attackers to cause a denial of service (DoS) via a crafted PDF file.

A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SELECT. A user could store such rows that are forbidden by UPDATE and SELECT policies but not by INSERT policies.