All CVEs — page 311 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw is a memory corruption vulnerability in Qualcomm's SAR1165P and SC8380XP firmware components that occurs during concurrent operations on shared memory page lists due to insufficient synchronization. This allows an authenticated attacker with local access to potentially execute arbitrary code or cause system instability.
A memory corruption vulnerability exists in Qualcomm's secure boot process where a non-secure loader can rewrite page tables before secure memory initialization, potentially allowing attackers to execute arbitrary code with elevated privileges. This flaw occurs during firmware loading and can lead to complete system compromise.
The vulnerability allows for a stack-based buffer overflow through manipulation of the wifiPwd argument, leading to potential remote code execution.
The ACPT (Premium) plugin for WordPress allows authenticated attackers with subscriber-level access or higher to execute code on the server via the REST API form creation endpoint and unsandboxed Twig environment rendering email templates.
The Sitemovr application suffers from unauthenticated sensitive data exposure, allowing attackers to access protected information without any authentication or authorization. This vulnerability is particularly concerning as it affects versions 1.0.1 and earlier, potentially exposing confidential data to anyone who can reach the application.
This vulnerability allows authenticated attackers to bypass subscription restrictions in the WP Synchro plugin, potentially enabling unauthorized access to premium features or content. The flaw stems from improper validation of user subscriptions, making it a significant authentication bypass issue.
Fluent Affiliate Pro plugin allows unauthenticated users to perform actions that should require authentication, leading to potential unauthorized modifications of affiliate settings and data. This broken access control vulnerability could allow attackers to manipulate affiliate configurations without needing valid credentials.
This vulnerability allows attackers to bypass authorization controls in the Green Invoice Morning for WooCommerce plugin, enabling them to perform actions they shouldn't be able to access. The flaw stems from incorrectly configured access control security levels that leave critical functionality exposed.
FluentBooking Pro versions before 2.5.0 suffer from unauthenticated broken access control that allows attackers to modify booking data without any authentication. This vulnerability enables unauthorized users to manipulate reservations, potentially leading to double-booking, revenue loss, or data corruption.