2023 CVEs (page 178)
Page 178 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21292 | Medium | 5.5 | 2023-08-14 | In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused deputy. This could… |
CVE-2023-21290 | Medium | 5.5 | 2023-08-14 | In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. This could lead to local denial of service wit… |
CVE-2023-21289 | Medium | 5.5 | 2023-08-14 | In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure w… |
CVE-2023-21288 | Medium | 5.5 | 2023-08-14 | In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local informatio… |
CVE-2023-21287 | Critical | 9.8 | 2023-08-14 | In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileg… |
CVE-2023-21286 | High | 7.8 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local escalation… |
CVE-2023-21285 | Medium | 5.5 | 2023-08-14 | In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information… |
CVE-2023-21284 | Medium | 5.5 | 2023-08-14 | In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. Thi… |
CVE-2023-21283 | Medium | 5.5 | 2023-08-14 | In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information… |
CVE-2023-21282 | High | 8.8 | 2023-08-14 | In TRANSPOSER_SETTINGS of lpp_tran.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n… |
CVE-2023-21281 | High | 7.8 | 2023-08-14 | In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the code. This could lead… |
CVE-2023-21280 | Medium | 5.5 | 2023-08-14 | In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. This could lead to local denial of… |
CVE-2023-21279 | Medium | 5.5 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no a… |
CVE-2023-21278 | Low | 3.3 | 2023-08-14 | In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalatio… |
CVE-2023-21277 | Medium | 5.5 | 2023-08-14 | In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information… |
CVE-2023-21276 | Medium | 5.5 | 2023-08-14 | In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure wit… |
CVE-2023-21275 | High | 7.8 | 2023-08-14 | In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections due to a logic error… |
CVE-2023-21274 | Medium | 5.5 | 2023-08-14 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-21273 | High | 8.8 | 2023-08-14 | In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code… |
CVE-2023-21272 | High | 7.8 | 2023-08-14 | In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. This could lead to local escalation of privilege with n… |
CVE-2023-21271 | Medium | 5.5 | 2023-08-14 | In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosu… |
CVE-2023-21235 | High | 7.8 | 2023-08-14 | In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permissions bypass. This… |
CVE-2023-21234 | Medium | 5.5 | 2023-08-14 | In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen PIN due to a missing… |
CVE-2023-21233 | High | 7.5 | 2023-08-14 | In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additi… |
CVE-2023-21232 | Low | 3.3 | 2023-08-14 | In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. This could lead to local information di… |
CVE-2023-21231 | High | 7.8 | 2023-08-14 | In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-protected activity d… |
CVE-2023-21230 | Medium | 5.5 | 2023-08-14 | In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi access point change and… |
CVE-2023-21229 | High | 7.8 | 2023-08-14 | In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe PendingIntent. This co… |
CVE-2023-40020 | Critical | 9.9 | 2023-08-14 | PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctl… |
CVE-2023-40013 | High | 7.1 | 2023-08-14 | SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will… |
CVE-2023-39950 | Medium | 6.1 | 2023-08-14 | efibootguard is a simple UEFI boot loader with support for safely switching between current and updated partition sets. Insufficient or missing validation and… |
CVE-2023-39829 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk_crypto2_4g parameter in the fromSetWirelessRepeat function. |
CVE-2023-39828 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. |
CVE-2023-39827 | High | 7.5 | 2023-08-14 | Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule_info parameter in the formAddMacfilterRule function. |
CVE-2023-38687 | Medium | 5.4 | 2023-08-14 | Svelecte is a flexible autocomplete/select component written in Svelte. Svelecte item names are rendered as raw HTML with no escaping. This allows the injectio… |
CVE-2023-21269 | High | 7.8 | 2023-08-14 | In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL bypass. This could le… |
CVE-2023-21268 | Medium | 5.5 | 2023-08-14 | In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of servic… |
CVE-2023-21267 | Medium | 5.5 | 2023-08-14 | In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code. This… |
CVE-2023-21265 | High | 7.5 | 2023-08-14 | In multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no additional execution… |
CVE-2023-21264 | Medium | 6.7 | 2023-08-14 | In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to… |
CVE-2023-21242 | Critical | 9.8 | 2023-08-14 | In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could l… |
CVE-2023-21140 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21134 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21133 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-21132 | Medium | 6.8 | 2023-08-14 | In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead t… |
CVE-2023-20965 | Critical | 9.8 | 2023-08-14 | In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to r… |
CVE-2023-40024 | Medium | 5.4 | 2023-08-14 | ScanCode.io is a server to script and automate software composition analysis pipelines. In the `/license/` endpoint, the detailed view key is not properly vali… |
CVE-2023-40023 | Medium | 6.5 | 2023-08-14 | yaklang is a programming language designed for cybersecurity. The Yak Engine has been found to contain a local file inclusion (LFI) vulnerability. This vulnera… |
CVE-2023-3721 | Medium | 4.8 | 2023-08-14 | The WP-EMail WordPress plugin before 2.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-3645 | Medium | 4.8 | 2023-08-14 | The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow high privilege users su… |
CVE-2023-3601 | Medium | 4.3 | 2023-08-14 | The Simple Author Box WordPress plugin before 2.52 does not verify a user ID before outputting information about that user, leading to arbitrary user informati… |
CVE-2023-3435 | Critical | 9.8 | 2023-08-14 | The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its… |
CVE-2023-3328 | Medium | 4.8 | 2023-08-14 | The Custom Field For WP Job Manager WordPress plugin before 1.2 does not sanitise and escape some of its settings, which could allow high privilege users such… |
CVE-2023-2803 | Medium | 6.1 | 2023-08-14 | The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in the page, leading t… |
CVE-2023-2802 | Medium | 4.8 | 2023-08-14 | The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape some of its settings, which could allow high privilege users… |
CVE-2023-2606 | Medium | 4.8 | 2023-08-14 | The WP Brutal AI WordPress plugin before 2.06 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor… |
CVE-2023-39908 | High | 7.5 | 2023-08-14 | The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to d… |
CVE-2023-39293 | Critical | 9.8 | 2023-08-14 | A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to execute… |
CVE-2023-39292 | Critical | 9.8 | 2023-08-14 | A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious actor to access sensi… |
CVE-2023-29468 | Critical | 9.8 | 2023-08-14 | The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can… |
CVE-2023-28483 | High | 8.8 | 2023-08-14 | An issue was discovered in Tigergraph Enterprise 3.7.0. The GSQL query language provides users with the ability to write data to files on a remote TigerGraph s… |
CVE-2023-28482 | Medium | 6.5 | 2023-08-14 | An issue was discovered in Tigergraph Enterprise 3.7.0. A single TigerGraph instance can host multiple graphs that are accessed by multiple different users. Th… |
CVE-2023-28481 | High | 8.8 | 2023-08-14 | An issue was discovered in Tigergraph Enterprise 3.7.0. There is unsecured write access to SSH authorized keys file. Any code running as the tigergraph user is… |
CVE-2023-28480 | Medium | 6.5 | 2023-08-14 | An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ code. To su… |
CVE-2023-40360 | Medium | 5.5 | 2023-08-14 | QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured b… |
CVE-2023-40312 | Medium | 6.7 | 2023-08-14 | Multiple reflected XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple pla… |
CVE-2023-40311 | Medium | 6.7 | 2023-08-14 | Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platfo… |
CVE-2023-38741 | High | 7.5 | 2023-08-14 | IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read opera… |
CVE-2023-38721 | High | 8.4 | 2023-08-14 | The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor could gain access to… |
CVE-2023-32748 | Critical | 9.8 | 2023-08-14 | The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with internal network access to… |
CVE-2023-0872 | High | 8.2 | 2023-08-14 | The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of p… |
CVE-2023-40359 | Critical | 9.8 | 2023-08-14 | xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a po… |
CVE-2023-40354 | Medium | 6.5 | 2023-08-14 | An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password i… |
CVE-2023-33013 | High | 8.8 | 2023-08-14 | A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacke… |
CVE-2023-28768 | Medium | 6.5 | 2023-08-14 | Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firmware version V4.80… |
CVE-2023-4322 | Critical | 9.8 | 2023-08-14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2023-31041 | High | 7.5 | 2023-08-14 | An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext… |
CVE-2023-30754 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in AdFoxly AdFoxly – Ad Manager, AdSense Ads & Ads.Txt plugin <= 1.8.5 versions. |
CVE-2023-30752 | Medium | 5.9 | 2023-08-14 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Silvia Pfeiffer and Andrew Nimmo External Videos plugin <= 2.0.1 versions. |
CVE-2023-30751 | Medium | 5.9 | 2023-08-14 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in iControlWP Article Directory Redux plugin <= 1.0.2 versions. |
CVE-2023-30749 | Medium | 5.9 | 2023-08-14 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in ihomefinder Optima Express + MarketBoost IDX Plugin plugin <= 7.3.0 versions. |
CVE-2023-30489 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Email Subscription Popup plugin <= 1.2.16 versions. |
CVE-2023-28535 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions. |
CVE-2023-30483 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions. |
CVE-2023-30477 | Medium | 5.9 | 2023-08-14 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions. |
CVE-2023-30475 | High | 7.1 | 2023-08-14 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coupon Affiliates plugin <= 5.4.5 versions. |
CVE-2023-29097 | Medium | 5.9 | 2023-08-14 | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions. |
CVE-2023-37070 | Medium | 4.8 | 2023-08-14 | Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) |
CVE-2023-30188 | High | 7.5 | 2023-08-14 | Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via crafted JavaScript f… |
CVE-2023-30187 | Critical | 9.8 | 2023-08-14 | An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScr… |
CVE-2023-30186 | Critical | 9.8 | 2023-08-14 | A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted JavaScript file. |
CVE-2023-37847 | Critical | 9.8 | 2023-08-14 | novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. |
CVE-2023-4321 | Medium | 6.1 | 2023-08-14 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3. |
CVE-2023-3160 | High | 7.8 | 2023-08-14 | The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permi… |
CVE-2023-40305 | Medium | 5.5 | 2023-08-14 | GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. |
CVE-2023-40303 | High | 7.8 | 2023-08-14 | GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions in ftpd, rcp, rlogin, rsh, rshd, and uu… |
CVE-2023-3267 | Critical | 9.1 | 2023-08-14 | When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. The username is passed without sanitizat… |
CVE-2023-3266 | Critical | 9.8 | 2023-08-14 | A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentic… |
CVE-2023-3265 | Critical | 9.8 | 2023-08-14 | An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an attacker to login int… |
CVE-2023-3264 | Medium | 6.7 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database… |