Lime

The issue is related to a use after free vulnerability in the Translate component of Google Chrome, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved via a crafted HTML page, allowing the attacker to exploit heap corruption.

A critical issue has been found in the processing of the file /editBranchResult.php, where the manipulation of the `ID` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue has been found in the 1000 Projects Bookstore Management System, affecting unknown code in the file book detail.php. The manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely.

A critical vulnerability was found in the Codezips Online Institute Management System. This issue affects unknown code of the file /profile.php. The manipulation of the `old image` argument leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

The issue is related to a use after free in the Autofill function, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.

The issue is related to a use after free vulnerability in the Media Router component of Google Chrome on Android and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker, potentially allowing them to impact the confidentiality, integrity, and availability of protected information. The exploitation can occur via a crafted HTML page, potentially leading to heap corruption.

The issue is related to a use-after-free vulnerability in the user interface of Google Chrome on iOS. This vulnerability can be exploited by a remote attacker who convinces a user to engage in specific UI gestures, potentially allowing the attacker to exploit heap corruption via a crafted HTML page. The estimated severity of this issue is medium.

The issue is related to a use after free in ParcelTracking, which can be exploited by a remote attacker who convinces a user to engage in specific UI gestures, potentially leading to heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.

The issue is related to a use after free flaw in the Sharing component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This may enable the attacker to execute arbitrary code. The severity of this issue is considered high.

The issue is related to a use after free in the Downloads component, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page. This could allow an attacker to execute arbitrary code. The vulnerability is considered high severity.

The issue is related to a use after free vulnerability in the Screen Capture function, which can be exploited by a remote attacker using a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a denial of service. The attacker must convince a user to engage in specific UI gestures to exploit the vulnerability.

The issue is related to a use after free vulnerability in the Audio component of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing them to access protected information, execute arbitrary code, or cause a denial of service by exploiting heap corruption.

The issue is related to improved memory handling and may allow an app to execute arbitrary code with kernel privileges. This is due to a buffer overflow in the kernel of Mac OS, tvOS, watchOS, iOS, and iPadOS, which can be exploited to elevate privileges, execute arbitrary code, or cause a denial of service.

The issue is related to an arbitrary file upload vulnerability. This vulnerability is located in the picture upload point of the `gallery` file of the `Gallery` module in the background management system.

The issue is related to SQL Injection via the "/pet shop/classes/Master.php?f=delete category,id" endpoint. This allows for potential exploitation.

The issue is related to SQL injection via the /pet shop/classes/Master.php endpoint, specifically when the `f` parameter is set to `delete sub category` and the `id` variable is used. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue concerns a SQL injection vulnerability. It can be exploited via the /pet shop/classes/Master.php endpoint, specifically through the `f` and `id` parameters. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.