Autore: Angelo Barbosa

CVE-2023-50465 | Monica 4.0.0 SVG Document cross site scripting

A vulnerability was found in Monica 4.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component SVG Document Handler. The manipulation leads to cross site scripting. This vulnerability is known as CVE-2023-50465. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2023-48425 | Google Android U-Boot Privilege Escalation

A vulnerability was found in Google Android and classified as problematic. This issue affects some unknown processing of the component U-Boot. The manipulation leads to Privilege Escalation. The identification of this vulnerability is CVE-2023-48425. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to apply a patch to fix this...

Per saperne di più

CVE-2023-49355 | jq 1.2e-111 decNumber/decNumber.c decToString out-of-bounds write

A vulnerability has been found in jq 1.2e-111 and classified as critical. This vulnerability affects the function decToString of the file decNumber/decNumber.c. The manipulation with the input []-1.2e-1111111111 leads to out-of-bounds write. This vulnerability was named CVE-2023-49355. Access to the local network is required for this attack. There is no exploit...

Per saperne di più

CVE-2023-48424 | Google Android U-Boot Shell Privilege Escalation

A vulnerability, which was classified as problematic, was found in Google Android. This affects an unknown part of the component U-Boot Shell. The manipulation leads to Privilege Escalation. This vulnerability is uniquely identified as CVE-2023-48424. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to apply a patch to fix this...

Per saperne di più