Aggregator

Qilin

Dark Feed IO
1 month 3 weeks ago

You must login to view this content

cohenido

CVE-2025-69325 | primersoftware Primer MyData for Woocommerce Plugin up to 4.2.8 on WordPress path traversal

VulDB Recent Entries
1 month 3 weeks ago
A vulnerability was found in primersoftware Primer MyData for Woocommerce Plugin up to 4.2.8 on WordPress. It has been classified as critical. The impacted element is an unknown function. This manipulation causes path traversal. The identification of this vulnerability is CVE-2025-69325. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2023-52897 | Linux Kernel up to 6.1.7 btrfs fs/btrfs/qgroup.c state issue (bb2c2e62539f/75181406b4ea / WID-SEC-2024-1888)

Vuldb Updates
1 month 3 weeks ago
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.1.7. Affected by this issue is some unknown functionality of the file fs/btrfs/qgroup.c of the component btrfs. The manipulation leads to state issue. This vulnerability is referenced as CVE-2023-52897. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2023-52896 | Linux Kernel up to 5.4.229/5.10.164/5.15.89/6.1.7 btrfs_qgroup_rescan null pointer dereference (WID-SEC-2024-1888)

Vuldb Updates
1 month 3 weeks ago
A vulnerability labeled as critical has been found in Linux Kernel up to 5.4.229/5.10.164/5.15.89/6.1.7. This affects the function btrfs_qgroup_rescan. The manipulation results in null pointer dereference. This vulnerability is identified as CVE-2023-52896. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.
vuldb.com

CVE-2023-52895 | Linux Kernel up to 6.1.7 poll buffer overflow (36fc7317cdb1/8caa03f10bf9 / WID-SEC-2024-1888)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.1.7. It has been rated as critical. This affects an unknown part of the component poll. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2023-52895. The attack can only be initiated within the local network. No exploit exists. Upgrading the affected component is advised.
vuldb.com

CVE-2023-52894 | Linux Kernel up to 6.1.7 usb ncm_bitrate null pointer dereference (WID-SEC-2024-1888)

Vuldb Updates
1 month 3 weeks ago
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.7. Affected by this vulnerability is the function ncm_bitrate of the component usb. Executing a manipulation can lead to null pointer dereference. The identification of this vulnerability is CVE-2023-52894. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2023-52893 | Linux Kernel up to 6.1.7 EFI Variable gsmi_get_variable null pointer dereference (WID-SEC-2024-1888)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in Linux Kernel up to 6.1.7 and classified as critical. Affected is the function gsmi_get_variable of the component EFI Variable Handler. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2023-52893. Access to the local network is required for this attack to succeed. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

US Law Firm Accuses Lenovo of Bulk Data Transfers to China

Cyber Security News
1 month 3 weeks ago

A U.S. law firm has filed a proposed class action alleging that Lenovo’s website tracking and advertising infrastructure enabled “bulk” transfers of Americans’ sensitive identifiers and browsing context to entities tied to China, in violation of the Justice Department’s Data Security Program rules. The complaint, filed by Almeida Law Group on behalf of San Francisco […]

The post US Law Firm Accuses Lenovo of Bulk Data Transfers to China appeared first on Cyber Security News.

Guru Baran

CVE-2023-46871 | GPAC 2.3-DEV-rev602-ged8424300-master MP4Box scenegraph/vrml_tools.c NewSFDouble denial of service (Issue 2658 / EUVD-2023-51037)

Vuldb Updates
1 month 3 weeks ago
A vulnerability labeled as problematic has been found in GPAC 2.3-DEV-rev602-ged8424300-master. This affects the function NewSFDouble of the file scenegraph/vrml_tools.c of the component MP4Box. The manipulation results in denial of service. This vulnerability is cataloged as CVE-2023-46871. The attack must originate from the local network. There is no exploit available.
vuldb.com

CVE-2023-46866 | International Color Consortium DemoIccMAX 79ecb74 IccProfLib/IccTagLut.cpp CIccCLUT::Interp3d out-of-bounds (Issue 54 / EUVD-2023-51032)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in International Color Consortium DemoIccMAX 79ecb74. It has been classified as problematic. This vulnerability affects the function CIccCLUT::Interp3d in the library IccProfLib/IccTagLut.cpp. This manipulation causes out-of-bounds read. The identification of this vulnerability is CVE-2023-46866. The attack needs to be done within the local network. There is no exploit available. Applying a patch is the recommended action to fix this issue.
vuldb.com

CVE-2023-46867 | International Color Consortium DemoIccMAX 79ecb74 IccCmm.cpp GetCurve null pointer dereference (Issue 54 / EUVD-2023-51033)

Vuldb Updates
1 month 3 weeks ago
A vulnerability was found in International Color Consortium DemoIccMAX 79ecb74. It has been declared as problematic. This issue affects the function CIccXformMatrixTRC::GetCurve of the file IccCmm.cpp. Such manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2023-46867. The attack needs to be initiated within the local network. No exploit is available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2023-46863 | Peppermint Ticket Management up to 0.2.3 POST Request download filepath path traversal (Issue 108 / EUVD-2023-51029)

Vuldb Updates
1 month 3 weeks ago
A vulnerability, which was classified as problematic, was found in Peppermint Ticket Management up to 0.2.3. Affected by this vulnerability is an unknown functionality of the file /api/v1/users/file/download of the component POST Request Handler. Executing a manipulation of the argument filepath can lead to relative path traversal. This vulnerability is handled as CVE-2023-46863. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.
vuldb.com

Managed ad