The User Registration WordPress plugin before 2.2.4.1 does not properly restrict the files to be uploaded via an AJAX action available to both unauthenticated and authenticated users, which could allow unauthenticated users to upload PHP files for example.

In network service, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel.

In Music service, there is a missing permission check. This could lead to local denial of service in Music service with no additional execution privileges needed.