CVE-2024-8929

MEDIUM Year: 2024
CVSS v3 Score
5.8
Medium
Weakness Type
CWE-125
View all →

Vulnerability Description

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Related Vulnerabilities

CVE-2020-28915

MEDIUM
CVSS:5.8(Medium)

A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.

CWE-1252020

CVE-2020-3981

MEDIUM
CVSS:5.8(Medium)

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds read vulner...

CWE-1252020

CVE-2023-39176

MEDIUM
CVSS:5.8(Medium)

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can resu...

CWE-1252023

CVE-2017-13317

MEDIUM
CVSS:5.7(Medium)

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional exe...

CWE-1252017

CVE-2017-13318

MEDIUM
CVSS:5.7(Medium)

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privi...

CWE-1252017

CVE-2018-11293

MEDIUM
CVSS:5.7(Medium)

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_n...

CWE-1252018