2023 CVEs (page 96)
Page 96 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33024 | Medium | 6.7 | 2023-12-05 | Memory corruption while sending SMS from AP firmware. |
CVE-2023-33022 | High | 8.4 | 2023-12-05 | Memory corruption in HLOS while invoking IOCTL calls from user-space. |
CVE-2023-33018 | High | 7.8 | 2023-12-05 | Memory corruption while using the UIM diag command to get the operators name. |
CVE-2023-33017 | High | 7.8 | 2023-12-05 | Memory corruption in Boot while running a ListVars test in UEFI Menu during boot. |
CVE-2023-28588 | High | 7.5 | 2023-12-05 | Transient DOS in Bluetooth Host while rfc slot allocation. |
CVE-2023-28587 | High | 7.8 | 2023-12-05 | Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. |
CVE-2023-28586 | Medium | 6.0 | 2023-12-05 | Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. |
CVE-2023-28585 | High | 8.2 | 2023-12-05 | Memory corruption while loading an ELF segment in TEE Kernel. |
CVE-2023-28580 | Medium | 6.7 | 2023-12-05 | Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. |
CVE-2023-28579 | Medium | 6.7 | 2023-12-05 | Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length. |
CVE-2023-28551 | High | 7.8 | 2023-12-05 | Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. |
CVE-2023-28550 | High | 7.8 | 2023-12-05 | Memory corruption in MPP performance while accessing DSM watermark using external memory address. |
CVE-2023-28546 | High | 7.8 | 2023-12-05 | Memory Corruption in SPS Application while exporting public key in sorter TA. |
CVE-2023-22668 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Audio while invoking IOCTLs calls from the user-space. |
CVE-2023-22383 | Medium | 6.7 | 2023-12-05 | Memory Corruption in camera while installing a fd for a particular DMA buffer. |
CVE-2023-21634 | Medium | 6.7 | 2023-12-05 | Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. |
CVE-2023-48698 | Medium | 6.8 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48697 | Medium | 6.4 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48696 | Medium | 6.7 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48695 | High | 7.3 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48694 | Medium | 6.8 | 2023-12-05 | Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code… |
CVE-2023-48693 | High | 8.7 | 2023-12-05 | Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary re… |
CVE-2023-48692 | Critical | 9.0 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48691 | High | 8.1 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds… |
CVE-2023-48316 | Critical | 9.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48315 | High | 8.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-5808 | High | 7.6 | 2023-12-05 | SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrat… |
CVE-2023-49292 | Medium | 4.9 | 2023-12-05 | ecies is an Elliptic Curve Integrated Encryption Scheme for secp256k1 in Golang. If funcations Encapsulate(), Decapsulate() and ECDH() could be called by an at… |
CVE-2023-49291 | Critical | 9.3 | 2023-12-05 | tj-actions/branch-names is a Github action to retrieve branch or tag names with support for all events. The `tj-actions/branch-names` GitHub Actions improperly… |
CVE-2023-49290 | Medium | 5.3 | 2023-12-05 | lestrrat-go/jwx is a Go module implementing various JWx (JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE) technologies. A p2c parameter set too high in JWE's algo… |
CVE-2023-49289 | Medium | 6.3 | 2023-12-05 | Ajax.NET Professional (AjaxPro) is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke me… |
CVE-2023-49284 | Low | 3.9 | 2023-12-05 | fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally fo… |
CVE-2023-26943 | Medium | 6.5 | 2023-12-05 | Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the original. |
CVE-2023-26942 | Medium | 6.5 | 2023-12-05 | Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the original. |
CVE-2023-26941 | Medium | 6.5 | 2023-12-05 | Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original. |
CVE-2023-5944 | High | 7.8 | 2023-12-04 | Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legitimate us… |
CVE-2023-49293 | Medium | 6.1 | 2023-12-04 | Vite is a website frontend framework. When Vite's HTML transformation is invoked manually via `server.transformIndexHtml`, the original request URL is passed i… |
CVE-2023-49288 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Affected versions of squid are subject to a a Use-After-Free bug which can lead to… |
CVE-2023-49286 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to an Incorrect Check of Function Return Value bug Squid is vulnerable to a Den… |
CVE-2023-49285 | High | 8.6 | 2023-12-04 | Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Buffer Overread bug Squid is vulnerable to a Denial of Service attack agai… |
CVE-2023-49280 | High | 7.7 | 2023-12-04 | XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request allows to edit any p… |
CVE-2023-45781 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-45779 | High | 7.8 | 2023-12-04 | In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. This could lead to local escal… |
CVE-2023-45777 | High | 7.8 | 2023-12-04 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel… |
CVE-2023-45776 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45775 | High | 7.8 | 2023-12-04 | In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-45774 | High | 7.8 | 2023-12-04 | In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. This could lead to local e… |
CVE-2023-45773 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-40465 | High | 8.3 | 2023-12-04 | Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area netwo… |
CVE-2023-40464 | High | 8.1 | 2023-12-04 | Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items coul… |
CVE-2023-40463 | High | 8.1 | 2023-12-04 | When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the… |
CVE-2023-40462 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial… |
CVE-2023-40461 | High | 8.1 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field whi… |
CVE-2023-40460 | High | 7.1 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authentica… |
CVE-2023-40459 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially resul… |
CVE-2023-40103 | High | 7.8 | 2023-12-04 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-40098 | Medium | 5.5 | 2023-12-04 | In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This… |
CVE-2023-40097 | High | 7.8 | 2023-12-04 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation o… |
CVE-2023-40096 | High | 7.8 | 2023-12-04 | In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lea… |
CVE-2023-40095 | High | 7.8 | 2023-12-04 | In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to l… |
CVE-2023-40094 | High | 7.8 | 2023-12-04 | In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local esc… |
CVE-2023-40092 | Medium | 5.5 | 2023-12-04 | In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local in… |
CVE-2023-40091 | High | 7.8 | 2023-12-04 | In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with n… |
CVE-2023-40090 | Medium | 6.5 | 2023-12-04 | In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to… |
CVE-2023-40089 | High | 7.8 | 2023-12-04 | In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to… |
CVE-2023-40088 | High | 8.8 | 2023-12-04 | In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead… |
CVE-2023-40087 | High | 8.8 | 2023-12-04 | In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device esc… |
CVE-2023-40084 | High | 7.8 | 2023-12-04 | In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2023-40083 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-40082 | Critical | 9.8 | 2023-12-04 | In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of… |
CVE-2023-40081 | Medium | 5.5 | 2023-12-04 | In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to l… |
CVE-2023-40080 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privi… |
CVE-2023-40079 | High | 7.8 | 2023-12-04 | In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalat… |
CVE-2023-40078 | Critical | 9.8 | 2023-12-04 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2023-40077 | High | 8.1 | 2023-12-04 | In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no add… |
CVE-2023-40076 | Medium | 5.5 | 2023-12-04 | In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead… |
CVE-2023-40075 | Medium | 5.5 | 2023-12-04 | In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to… |
CVE-2023-40074 | Medium | 5.5 | 2023-12-04 | In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User inte… |
CVE-2023-40073 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no ad… |
CVE-2023-35690 | Critical | 9.8 | 2023-12-04 | In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privileg… |
CVE-2023-35668 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information d… |
CVE-2023-24052 | Critical | 9.8 | 2023-12-04 | An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not… |
CVE-2023-24051 | Critical | 9.8 | 2023-12-04 | A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks. |
CVE-2023-24050 | Medium | 5.4 | 2023-12-04 | Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-… |
CVE-2023-24049 | Critical | 9.8 | 2023-12-04 | An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management. |
CVE-2023-24048 | High | 8.8 | 2023-12-04 | Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request… |
CVE-2023-24047 | Medium | 6.8 | 2023-12-04 | An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashin… |
CVE-2023-24046 | Medium | 6.8 | 2023-12-04 | An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in the ping utility. |
CVE-2023-21403 | Critical | 9.8 | 2023-12-04 | In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privile… |
CVE-2023-21402 | Critical | 9.8 | 2023-12-04 | In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in… |
CVE-2023-21401 | Critical | 9.8 | 2023-12-04 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv… |
CVE-2023-21263 | Critical | 9.8 | 2023-12-04 | In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in t… |
CVE-2023-21228 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21227 | High | 7.5 | 2023-12-04 | In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in th… |
CVE-2023-21218 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21217 | Critical | 9.8 | 2023-12-04 | In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no addi… |
CVE-2023-21216 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation… |
CVE-2023-21215 | Critical | 9.8 | 2023-12-04 | In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation o… |
CVE-2023-21166 | Critical | 9.8 | 2023-12-04 | In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in t… |
CVE-2023-21164 | Critical | 9.8 | 2023-12-04 | In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privileg… |