Show filters
524 Total Results
Displaying 121-130 of 524
Sort by:
Attacker Value
Unknown

CVE-2021-27502

Disclosure Date: November 21, 2023 (last updated December 02, 2023)
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.
Attacker Value
Unknown

CVE-2021-27429

Disclosure Date: November 20, 2023 (last updated December 02, 2023)
Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution.
Attacker Value
Unknown

CVE-2021-22636

Disclosure Date: November 20, 2023 (last updated December 02, 2023)
Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.
Attacker Value
Unknown

CVE-2023-32125

Disclosure Date: November 09, 2023 (last updated November 16, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
Attacker Value
Unknown

CVE-2023-23702

Disclosure Date: November 06, 2023 (last updated November 15, 2023)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.
Attacker Value
Unknown

CVE-2023-43067

Disclosure Date: October 23, 2023 (last updated February 25, 2025)
Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploit this vulnerability disclosing local files in the file system.
Attacker Value
Unknown

CVE-2023-43066

Disclosure Date: October 23, 2023 (last updated February 25, 2025)
Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an authenticated, local attacker to exploit this vulnerability by authenticating to the device CLI and issuing certain commands.
Attacker Value
Unknown

CVE-2023-43074

Disclosure Date: October 23, 2023 (last updated February 25, 2025)
Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server.
Attacker Value
Unknown

CVE-2023-43065

Disclosure Date: October 23, 2023 (last updated February 25, 2025)
Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability. A low-privileged authenticated attacker can exploit these issues to obtain escalated privileges.
Attacker Value
Unknown

CVE-2023-45654

Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Pixelgrade Comments Ratings plugin <= 1.1.7 versions.