CVE Vulnerability Catalog

Memory corruption occurs when executing system service routines due to improper handling of user input buffers.

Memory corruption occurs when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

Transient denial of service occurs when processing a continuous receive command with a zero-sized global configuration override.

Memory corruption occurs when processing draw objects of incorrect type during graphics command list execution.

Memory corruption occurs when accessing and modifying geographic mapping data concurrently without proper synchronization.

A cryptographic issue occurs when processing non-ELF partitions, where authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

Memory corruption occurs when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

Memory corruption occurs when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. This may lead to unexpected system behavior or potential exploitation by an attacker.

The vulnerability causes memory corruption when processing camera operations due to an out-of-bounds write during driver updates.

The vulnerability causes memory corruption when processing camera CRE driver operations due to improper handling of buffer limits during hardware update preparation.

The vulnerability causes memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

The vulnerability causes memory corruption when processing camera requests with excessive batch and IO buffer configurations that exceed allocated memory size.

A memory corruption vulnerability occurs when the non-secure loader rewrites page tables before secure memory initialization. This can corrupt memory structures used by security mechanisms.

The vulnerability causes memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

A vulnerability in Tenda AC5 router (version 02.03.01.111_multi) affects an unknown function in the file /goform/setWifi of the Wifi Handler component. Manipulation of the wifiPwd argument leads to a stack-based buffer overflow. The attack can be launched remotely, and the exploit is publicly available.

A SQL Injection vulnerability was found in the Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL project in the file /admin_transaction.php, caused by manipulation of the Username argument. The attack can be performed remotely, and a public exploit is already available.

The ACPT (Premium) plugin for WordPress in versions up to and including 2.0.66 is vulnerable to Remote Code Execution via the render function. Missing capability check on the REST API form creation endpoint and unsandboxed Twig environment rendering email templates allow authenticated attackers with subscriber-level access and above to execute code on the server.

The vulnerability allows unauthenticated broken access control in WP Event Solution versions up to 4.1.25.

The Post SMTP plugin for WordPress in versions up to and including 4.0.1 is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web scripts into pages that execute when a user visits them.

The Sitemovr plugin in versions up to and including 1.0.1 allows an unauthenticated attacker to access sensitive data. No further technical details are provided in the description.