SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the application.

MISC:https://github.com/canton7/SyncTrayzor/issues/666 | MISC:https://github.com/canton7/SyncTrayzor/releases

views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.

MISC:https://github.com/sehmaschine/django-grappelli/commit/4ca94bcda0fa2720594506853d85e00c8212968f | MISC:https://github.com/sehmaschine/django-grappelli/compare/2.15.1...2.15.2 | MISC:https://github.com/sehmaschine/django-grappelli/issues/975 | MISC:https://github.com/sehmaschine/django-grappelli/pull/976

views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.

MISC:https://github.com/coderedcorp/coderedcms/compare/v0.22.2...v0.22.3 | MISC:https://github.com/coderedcorp/coderedcms/issues/448 | MISC:https://github.com/coderedcorp/coderedcms/pull/450

Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.

MISC:https://github.com/PX4/PX4-Autopilot/issues/18369

Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/8/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/8/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725

Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/7/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/7/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/7/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/7/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/7/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/7/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/7/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/7/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

MISC:https://consumer.huawei.com/en/support/bulletin/2023/7/ | URL:https://consumer.huawei.com/en/support/bulletin/2023/7/ | MISC:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858 | URL:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858