Vuldb Updates

A vulnerability was found in Google Android 11/12/12L/13/14. It has been classified as critical. Affected is the function createFromParcel of the file UsbConfiguration.java. The manipulation leads to permission issues. This vulnerability is traded as CVE-2023-40109. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Google Android 11/12/12L/13/14. It has been classified as problematic. Affected is the function btif_to_bta_response of the file btif_gatt_util.cc. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2024-0030. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in PHP and classified as problematic. This vulnerability affects unknown code. The manipulation leads to memory corruption. This vulnerability was named CVE-2012-3450. The attack can be initiated remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2024-12653. Local access is required to approach this attack. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. This vulnerability is known as CVE-2024-12654. Attacking locally is a requirement. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability classified as problematic has been found in Google Android 11/12/12L/13/14. This affects the function queryChildDocuments of the file FileSystemProvider.java. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2024-0032. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Google Android 11/12/12L/13/14. This issue affects the function ConvertRGBToPlanarYUV of the file Codec2BufferUtils.cpp. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2024-0023. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical was found in Apple macOS up to 15.1. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper access controls. This vulnerability is known as CVE-2024-54504. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in PlexTrac up to 2.8.0. It has been classified as critical. This affects an unknown part of the component File Handler. The manipulation leads to path traversal. This vulnerability is uniquely identified as CVE-2024-11834. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Apple macOS up to 15.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to state issue. This vulnerability is known as CVE-2024-54465. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in Drupal up to 10.2.10/10.3.8/11.0.7. This affects an unknown part. The manipulation leads to dynamically-determined object attributes. This vulnerability is uniquely identified as CVE-2024-55636. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Drupal up to 10.2.10/10.3.8/11.0.7. This vulnerability affects unknown code. The manipulation leads to dynamically-determined object attributes. This vulnerability was named CVE-2024-55637. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Drupal up to 7.101/10.2.10/10.3.8. This issue affects some unknown processing. The manipulation leads to dynamically-determined object attributes. The identification of this vulnerability is CVE-2024-55638. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in slimndap Theater Plugin up to 0.18.6.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function add_query_arg. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2024-11371. The attack can be launched remotely. There is no exploit available.

A vulnerability classified as critical has been found in RTI Connext Professional up to 5.3.1.44/6.0.1.39/6.1.2.20/7.3.0.4. Affected is an unknown function of the component Core Libraries/Routing Service. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2024-52063. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in Imagination Technologies Graphics DDK up to 24.2 RTM1. Affected by this vulnerability is an unknown functionality of the component GPU System Call Handler. The manipulation leads to use after free. This vulnerability is known as CVE-2024-46971. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Mozilla Firefox and Thunderbird. This affects the function crypto.generateCRMFRequest of the component CRMF Request Handler. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2013-1710. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Wireshark. Affected by this vulnerability is an unknown functionality. The manipulation leads to denial of service. This vulnerability is known as CVE-2009-3241. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in JetBrains TeamCity. Affected by this vulnerability is an unknown functionality of the component User Registration Handler. The manipulation leads to incorrect authorization. This vulnerability is known as CVE-2024-31134. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in JetBrains TeamCity. This affects an unknown part of the component 2FA. The manipulation leads to improper validation of consistency within input. This vulnerability is uniquely identified as CVE-2024-31136. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.