2023 CVEs (page 98)
Page 98 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-42733 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42732 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42731 | Medium | 4.4 | 2023-12-04 | In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-42730 | Medium | 5.5 | 2023-12-04 | In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information dis… |
CVE-2023-42729 | Medium | 4.4 | 2023-12-04 | In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-42728 | Medium | 5.5 | 2023-12-04 | In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execut… |
CVE-2023-42727 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privil… |
CVE-2023-42726 | Medium | 4.4 | 2023-12-04 | In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-42725 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42724 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42723 | Medium | 5.5 | 2023-12-04 | In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional executio… |
CVE-2023-42722 | Medium | 6.7 | 2023-12-04 | In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-42721 | Medium | 5.5 | 2023-12-04 | In flv extractor, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges… |
CVE-2023-42720 | Medium | 5.5 | 2023-12-04 | In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution… |
CVE-2023-42719 | Medium | 5.5 | 2023-12-04 | In video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional executi… |
CVE-2023-42718 | Medium | 5.5 | 2023-12-04 | In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosu… |
CVE-2023-42717 | High | 7.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed |
CVE-2023-42716 | High | 7.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed |
CVE-2023-42715 | Medium | 5.5 | 2023-12-04 | In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges nee… |
CVE-2023-42714 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42713 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42712 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42711 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42710 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42709 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42708 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42707 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42706 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42705 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42704 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42703 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42702 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42701 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42700 | Medium | 5.5 | 2023-12-04 | In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local informatio… |
CVE-2023-42699 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42698 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42697 | Medium | 5.5 | 2023-12-04 | In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information d… |
CVE-2023-42696 | High | 7.8 | 2023-12-04 | In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges need… |
CVE-2023-42695 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42694 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42693 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42692 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42691 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42690 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42689 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42688 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42687 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42686 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42685 | High | 7.8 | 2023-12-04 | In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42684 | Medium | 4.4 | 2023-12-04 | In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42683 | Medium | 4.4 | 2023-12-04 | In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42682 | Medium | 4.4 | 2023-12-04 | In gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-42681 | High | 7.8 | 2023-12-04 | In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed |
CVE-2023-42680 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privilege… |
CVE-2023-42679 | Medium | 4.4 | 2023-12-04 | In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-42678 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42677 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42676 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42675 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42674 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42673 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42672 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-42671 | Medium | 5.5 | 2023-12-04 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disc… |
CVE-2023-38003 | High | 7.2 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that t… |
CVE-2023-40692 | Medium | 5.9 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-F… |
CVE-2023-49948 | Medium | 5.3 | 2023-12-03 | Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL. |
CVE-2023-49947 | High | 7.5 | 2023-12-03 | Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication. |
CVE-2023-49946 | Critical | 9.1 | 2023-12-03 | In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This allows remot… |
CVE-2023-45178 | Medium | 6.5 | 2023-12-03 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM… |
CVE-2023-49926 | Medium | 6.1 | 2023-12-03 | app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget. |
CVE-2023-6474 | Medium | 4.3 | 2023-12-03 | A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code o… |
CVE-2023-6473 | Low | 3.5 | 2023-12-02 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.ph… |
CVE-2023-6472 | Low | 2.4 | 2023-12-02 | A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api… |
CVE-2023-6467 | Low | 3.1 | 2023-12-02 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /Websquare/likeClic… |
CVE-2023-6466 | Low | 3.5 | 2023-12-02 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet of the comp… |
CVE-2023-6465 | Medium | 4.3 | 2023-12-02 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as problematic. This affects an unknown part of the f… |
CVE-2023-6464 | Medium | 6.3 | 2023-12-02 | A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2023-39257 | High | 7.3 | 2023-12-02 | Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious standard user could potentially exploit… |
CVE-2023-39256 | High | 7.3 | 2023-12-02 | Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious standard user could potentially exploit… |
CVE-2023-49914 | Medium | 6.5 | 2023-12-02 | InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstanding, calm meditation state) via a 480 MHz… |
CVE-2023-6463 | Low | 3.5 | 2023-12-01 | A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unk… |
CVE-2023-48887 | Critical | 9.8 | 2023-12-01 | A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request. |
CVE-2023-48886 | Critical | 9.8 | 2023-12-01 | A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request. |
CVE-2023-48801 | Critical | 9.8 | 2023-12-01 | In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them through the snprintf f… |
CVE-2023-6462 | Low | 3.5 | 2023-12-01 | A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of th… |
CVE-2023-49281 | Medium | 4.7 | 2023-12-01 | Calendarinho is an open source calendaring application to manage large teams of consultants. An Open Redirect issue occurs when a web application redirects use… |
CVE-2023-49276 | Medium | 6.3 | 2023-12-01 | Uptime Kuma is an open source self-hosted monitoring tool. In affected versions the Google Analytics element in vulnerable to Attribute Injection leading to Cr… |
CVE-2023-48314 | High | 7.1 | 2023-12-01 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with Collabora Online Built-in CODE Server app can… |
CVE-2023-46746 | Medium | 4.8 | 2023-12-01 | PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host. A server-side request forgery (SSRF… |
CVE-2023-44402 | Medium | 6.1 | 2023-12-01 | Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. This only impacts apps that have the `embe… |
CVE-2023-44382 | Critical | 9.1 | 2023-12-01 | October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `editor.cms_pages`, `… |
CVE-2023-44381 | Medium | 4.9 | 2023-12-01 | October is a Content Management System (CMS) and web platform to assist with development workflow. An authenticated backend user with the `editor.cms_pages`, `… |
CVE-2023-49277 | High | 8.3 | 2023-12-01 | dpaste is an open source pastebin application written in Python using the Django framework. A security vulnerability has been identified in the expires paramet… |
CVE-2023-46174 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2023-43021 | Medium | 5.3 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in th… |
CVE-2023-42022 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2023-42019 | Medium | 5.9 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161… |
CVE-2023-42009 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2023-40699 | High | 7.5 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161… |
CVE-2023-43015 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |