2023 CVEs (page 166)
Page 166 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32811 | Medium | 6.7 | 2023-09-04 | In connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with… |
CVE-2023-32810 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible out of bounds read due to improper input validation. This could lead to local information leak with System execution p… |
CVE-2023-32809 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |
CVE-2023-32808 | Medium | 4.4 | 2023-09-04 | In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. This could lead to local leak… |
CVE-2023-32807 | Medium | 4.4 | 2023-09-04 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32806 | Medium | 6.7 | 2023-09-04 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executio… |
CVE-2023-32805 | Medium | 6.5 | 2023-09-04 | In power, there is a possible out of bounds write due to an insecure default value. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20851 | Medium | 6.3 | 2023-09-04 | In stc, there is a possible out of bounds read due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20850 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20849 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible use after free due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20848 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local escalation of privilege with System exec… |
CVE-2023-20847 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local denial of service with System execution… |
CVE-2023-20846 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20845 | Medium | 4.2 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution… |
CVE-2023-20844 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20843 | Medium | 4.2 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execu… |
CVE-2023-20842 | Medium | 6.5 | 2023-09-04 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System exe… |
CVE-2023-20841 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System executio… |
CVE-2023-20840 | Medium | 6.5 | 2023-09-04 | In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. This could lead to local escalation of privilege with System… |
CVE-2023-20839 | Medium | 4.2 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a missing valid range checking. This could lead to local information disclosure with System execution… |
CVE-2023-20838 | Medium | 4.0 | 2023-09-04 | In imgsys, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges nee… |
CVE-2023-20837 | Medium | 6.7 | 2023-09-04 | In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20836 | Medium | 4.4 | 2023-09-04 | In camsys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20835 | Medium | 6.4 | 2023-09-04 | In camsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20834 | Medium | 6.4 | 2023-09-04 | In pda, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20833 | Medium | 4.4 | 2023-09-04 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-20832 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20831 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20830 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20829 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20828 | Medium | 6.7 | 2023-09-04 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20827 | Medium | 6.4 | 2023-09-04 | In ims service, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20826 | Medium | 5.5 | 2023-09-04 | In cta, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execut… |
CVE-2023-20825 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-20824 | Medium | 5.5 | 2023-09-04 | In duraspeed, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional… |
CVE-2023-20823 | Medium | 4.4 | 2023-09-04 | In cmdq, there is a possible out of bounds read due to an incorrect status check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20822 | Medium | 6.7 | 2023-09-04 | In netdagent, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20821 | Medium | 6.7 | 2023-09-04 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20820 | High | 7.2 | 2023-09-04 | In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privile… |
CVE-2023-38554 | Medium | 5.5 | 2023-09-04 | In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no additional executio… |
CVE-2023-38553 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… |
CVE-2023-38468 | Medium | 4.4 | 2023-09-04 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-38467 | Medium | 4.4 | 2023-09-04 | In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-38466 | Medium | 5.5 | 2023-09-04 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38465 | Medium | 5.5 | 2023-09-04 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38464 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38463 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38462 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38461 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38460 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38459 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38458 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38457 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38456 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38455 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38454 | Medium | 5.5 | 2023-09-04 | In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38453 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38452 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38451 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38450 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38449 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38448 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38447 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38446 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38445 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges |
CVE-2023-38444 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38443 | High | 7.8 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges |
CVE-2023-38442 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38441 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38440 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38439 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38438 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38437 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-38436 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33918 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33917 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33916 | Medium | 5.5 | 2023-09-04 | In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33915 | High | 7.5 | 2023-09-04 | In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed |
CVE-2023-33914 | High | 7.5 | 2023-09-04 | In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no addit… |
CVE-2023-4749 | Medium | 6.3 | 2023-09-04 | A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file ind… |
CVE-2023-4747 | Medium | 6.3 | 2023-09-04 | A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file /uploads/tags.php. The manipulation of… |
CVE-2023-4746 | High | 8.8 | 2023-09-04 | A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the function Validity_check. The manipulation l… |
CVE-2023-4745 | Medium | 6.3 | 2023-09-04 | A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affe… |
CVE-2023-4744 | Critical | 9.8 | 2023-09-04 | A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName… |
CVE-2023-4743 | Low | 3.1 | 2023-09-03 | A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?… |
CVE-2023-4742 | Medium | 6.3 | 2023-09-03 | A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/user/export&uid=X. T… |
CVE-2023-4741 | Medium | 6.3 | 2023-09-03 | A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the com… |
CVE-2023-4740 | Medium | 6.3 | 2023-09-03 | A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=email/api/delDraft&archiveId=0 of th… |
CVE-2023-4739 | Medium | 6.3 | 2023-09-03 | A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this issue is some unkno… |
CVE-2023-4751 | High | 7.8 | 2023-09-03 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331. |
CVE-2023-41180 | Medium | 5.9 | 2023-09-03 | Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TL… |
CVE-2023-3703 | Critical | 10.0 | 2023-09-03 | Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials |
CVE-2023-39374 | High | 7.8 | 2023-09-03 | ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element |
CVE-2023-39373 | High | 7.4 | 2023-09-03 | A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay. |
CVE-2023-39372 | High | 8.1 | 2023-09-03 | StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352) |
CVE-2023-39371 | High | 8.8 | 2023-09-03 | StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601) |
CVE-2023-39370 | High | 8.8 | 2023-09-03 | StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79) |
CVE-2023-39369 | High | 8.8 | 2023-09-03 | StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79) |
CVE-2023-37222 | Medium | 4.8 | 2023-09-03 | Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user with administrator privilege. |
CVE-2023-37221 | High | 8.8 | 2023-09-03 | 7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). |