CVE-2023-46967
https://notcve.org/view.php?id=CVE-2023-46967
Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted support ticket. • https://www.sonarsource.com/blog/pitfalls-of-desanitization-leaking-customer-data-from-osticket • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVE-2024-0023
https://notcve.org/view.php?id=CVE-2024-0023
This could lead to local escalation of privilege with no additional execution privileges needed. ... Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://android.googlesource.com/platform/frameworks/av/+/30b1b34cfd5abfcfee759e7d13167d368ac6c268 https://source.android.com/security/bulletin/2024-01-01 • CWE-787: Out-of-bounds Write •
CVE-2024-0021
https://notcve.org/view.php?id=CVE-2024-0021
This could lead to local escalation of privilege with no additional execution privileges needed. ... Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://android.googlesource.com/platform/packages/apps/Settings/+/53ea491d276f9a7c586c7983c08105a9bb7051f1 https://source.android.com/security/bulletin/2024-01-01 • CWE-20: Improper Input Validation •
CVE-2024-0018
https://notcve.org/view.php?id=CVE-2024-0018
This could lead to local escalation of privilege with no additional execution privileges needed. ... Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://android.googlesource.com/platform/frameworks/av/+/bf6406041919f67219fd1829438dda28845d4c23 https://source.android.com/security/bulletin/2024-01-01 • CWE-122: Heap-based Buffer Overflow •
CVE-2024-0015
https://notcve.org/view.php?id=CVE-2024-0015
This could lead to local escalation of privilege with User execution privileges needed. ... Esto podría conducir a una escalada local de privilegios con permisos de ejecución del usuario necesarios. • https://github.com/UmVfX1BvaW50/CVE-2024-0015 https://android.googlesource.com/platform/frameworks/base/+/2ce1b7fd37273ea19fbbb6daeeaa6212357b9a70 https://source.android.com/security/bulletin/2024-01-01 •