2023 CVEs (page 55)
Page 55 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52373 | High | 7.5 | 2024-02-18 | Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing. |
CVE-2023-52372 | High | 7.5 | 2024-02-18 | Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-52371 | Low | 3.5 | 2024-02-18 | Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-52370 | Critical | 9.8 | 2024-02-18 | Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access. |
CVE-2023-52369 | Critical | 9.1 | 2024-02-18 | Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity. |
CVE-2023-52368 | Medium | 5.3 | 2024-02-18 | Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-52367 | High | 7.7 | 2024-02-18 | Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrit… |
CVE-2023-52366 | High | 7.5 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2023-52387 | High | 7.5 | 2024-02-18 | Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2023-52365 | Medium | 5.3 | 2024-02-18 | Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormall… |
CVE-2023-52363 | Medium | 5.3 | 2024-02-18 | Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to… |
CVE-2023-52362 | High | 7.5 | 2024-02-18 | Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-52361 | High | 7.5 | 2024-02-18 | The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity. |
CVE-2023-52360 | High | 7.5 | 2024-02-18 | Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity. |
CVE-2023-52358 | Medium | 6.2 | 2024-02-18 | Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-52357 | High | 7.5 | 2024-02-18 | Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability. |
CVE-2023-52097 | High | 7.5 | 2024-02-18 | Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidential… |
CVE-2023-50951 | Medium | 4.0 | 2024-02-17 | IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive informatio… |
CVE-2023-31728 | High | 7.0 | 2024-02-17 | Teltonika RUT240 devices with firmware before 07.04.2, when bridge mode is used, sometimes make SSH and HTTP services available on the IPv6 WAN interface even… |
CVE-2023-21833 | Medium | 4.3 | 2024-02-17 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Object Store). The supported version that is affected is 8.8. Eas… |
CVE-2023-40085 | Medium | 5.5 | 2024-02-16 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-21165 | High | 7.8 | 2024-02-16 | In DevmemIntUnmapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privil… |
CVE-2023-45860 | Medium | 6.5 | 2024-02-16 | In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permis… |
CVE-2023-51931 | High | 7.5 | 2024-02-16 | An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function. |
CVE-2023-49508 | Medium | 6.5 | 2024-02-16 | Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive informa… |
CVE-2023-6451 | High | 8.6 | 2024-02-16 | Publicly known cryptographic machine key in AlayaCare's Procura Portal before 9.0.1.2 allows attackers to forge their own authentication cookies and bypass the… |
CVE-2023-40122 | Low | 3.3 | 2024-02-16 | In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information di… |
CVE-2023-40093 | Medium | 5.5 | 2024-02-16 | In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local info… |
CVE-2023-40124 | Medium | 5.5 | 2024-02-15 | In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images… |
CVE-2023-40115 | High | 7.8 | 2024-02-15 | In readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additi… |
CVE-2023-40114 | High | 7.8 | 2024-02-15 | In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege w… |
CVE-2023-40113 | Medium | 5.5 | 2024-02-15 | In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local informati… |
CVE-2023-40112 | Medium | 5.5 | 2024-02-15 | In ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of past print… |
CVE-2023-40111 | High | 7.8 | 2024-02-15 | In setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending intent on behalf of system_server due to a confused deputy. Thi… |
CVE-2023-40110 | High | 7.8 | 2024-02-15 | In multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege… |
CVE-2023-40109 | High | 7.8 | 2024-02-15 | In createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL) due to a permissions bypass. This could lead to local escala… |
CVE-2023-40107 | High | 7.8 | 2024-02-15 | In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additio… |
CVE-2023-40106 | High | 7.8 | 2024-02-15 | In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to loca… |
CVE-2023-40105 | Medium | 5.5 | 2024-02-15 | In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to loca… |
CVE-2023-40104 | High | 7.5 | 2024-02-15 | In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information discl… |
CVE-2023-40100 | High | 7.8 | 2024-02-15 | In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege… |
CVE-2023-6123 | High | 7.5 | 2024-02-15 | Improper Neutralization vulnerability affects OpenText ALM Octane version 16.2.100 and above. The vulnerability could result in a remote code execution attack. |
CVE-2023-40057 | Critical | 9.0 | 2024-02-15 | The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authentic… |
CVE-2023-6937 | Medium | 5.3 | 2024-02-15 | wolfSSL prior to 5.6.6 did not check that messages in one (D)TLS record do not span key boundaries. As a result, it was possible to combine (D)TLS messages usi… |
CVE-2023-7081 | Critical | 9.8 | 2024-02-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection. Th… |
CVE-2023-6255 | High | 7.5 | 2024-02-15 | Use of Hard-coded Credentials vulnerability in Utarit Information Technologies SoliPay Mobile App allows Read Sensitive Strings Within an Executable. This iss… |
CVE-2023-5155 | Critical | 9.8 | 2024-02-15 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows… |
CVE-2023-4993 | High | 7.5 | 2024-02-15 | Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users. This issue affe… |
CVE-2023-47537 | Medium | 4.8 | 2024-02-15 | An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6… |
CVE-2023-45581 | High | 8.8 | 2024-02-15 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator… |
CVE-2023-44253 | Medium | 5.0 | 2024-02-15 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, Fo… |
CVE-2023-26206 | Medium | 6.8 | 2024-02-15 | An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7… |
CVE-2023-39245 | Critical | 9.8 | 2024-02-15 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthentic… |
CVE-2023-39244 | High | 7.3 | 2024-02-15 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthentica… |
CVE-2023-32484 | Critical | 9.8 | 2024-02-15 | Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthe… |
CVE-2023-32462 | Critical | 9.8 | 2024-02-15 | Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthe… |
CVE-2023-28078 | Critical | 9.1 | 2024-02-15 | Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could p… |
CVE-2023-4539 | High | 7.5 | 2024-02-15 | Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data s… |
CVE-2023-4538 | Medium | 6.2 | 2024-02-15 | The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP X… |
CVE-2023-4537 | High | 7.4 | 2024-02-15 | Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data… |
CVE-2023-51787 | High | 7.5 | 2024-02-15 | An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not free… |
CVE-2023-46596 | Medium | 5.1 | 2024-02-15 | Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60… |
CVE-2023-6138 | High | 7.9 | 2024-02-14 | A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary… |
CVE-2023-49721 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-48733 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-50927 | High | 8.6 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite impl… |
CVE-2023-50926 | High | 7.5 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message w… |
CVE-2023-48229 | High | 7.0 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 ra… |
CVE-2023-6409 | High | 7.7 | 2024-02-14 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when op… |
CVE-2023-6408 | High | 8.1 | 2024-02-14 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service an… |
CVE-2023-27975 | High | 7.1 | 2024-02-14 | CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when… |
CVE-2023-50868 | High | 7.5 | 2024-02-14 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU… |
CVE-2023-50387 | High | 7.5 | 2024-02-14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumpti… |
CVE-2023-5123 | High | 8.0 | 2024-02-14 | The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that allows fo… |
CVE-2023-5122 | Medium | 5.0 | 2024-02-14 | Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for… |
CVE-2023-46186 | Medium | 5.3 | 2024-02-14 | IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access con… |
CVE-2023-6441 | Critical | 9.8 | 2024-02-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc… |
CVE-2023-42776 | Low | 3.8 | 2024-02-14 | Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable infor… |
CVE-2023-41252 | Medium | 6.5 | 2024-02-14 | Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denia… |
CVE-2023-41231 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potentially enable escalatio… |
CVE-2023-41091 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2023-41090 | Low | 1.8 | 2024-02-14 | Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-40161 | Medium | 6.6 | 2024-02-14 | Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2023-40156 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2023-40154 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of… |
CVE-2023-39941 | High | 7.1 | 2024-02-14 | Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via ad… |
CVE-2023-39932 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of pri… |
CVE-2023-39432 | Medium | 6.7 | 2024-02-14 | Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potential… |
CVE-2023-39425 | High | 8.8 | 2024-02-14 | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-38566 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-38561 | Medium | 5.5 | 2024-02-14 | Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2023-38135 | Medium | 6.7 | 2024-02-14 | Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-36493 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-36490 | Medium | 5.0 | 2024-02-14 | Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local acce… |
CVE-2023-35769 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2023-35121 | High | 7.8 | 2024-02-14 | Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow… |
CVE-2023-35062 | Medium | 6.3 | 2024-02-14 | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2023-35061 | Medium | 4.3 | 2024-02-14 | Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to pote… |
CVE-2023-35060 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable esca… |
CVE-2023-35003 | Medium | 6.7 | 2024-02-14 | Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via loc… |