CVEs published December 4, 2023
242 CVEs were published on December 4, 2023: 7 critical, 38 high. Browse them by severity, product and exploitation status.
- Published
- 242
- Critical
- 7
- High
- 38
- Medium
- 29
- Low
- 2
- Unrated
- 166
- Now in CISA KEV
- 0
- Fix available
- 33
Most affected products
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 73
- Google Android
- 47
- MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- 12
- Dell PowerProtect Data Manager DM5500 Appliance
- 7
- SierraWireless ALEOS
- 7
- IBM Db2 for Linux, UNIX and Windows
- 6
- MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- 6
- Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- 6
- squid-cache squid
- 3
- Welcart e-Commerce
- 3
Critical 7
- CVE-2023-49291Improper Sanitization of Branch Name Leads to Arbitrary Code Injectiontj-actions branch-names
- CVE-2023-40077In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition.Google Android
- CVE-2023-21216In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21166In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-49093HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTLhtmlunit · org.htmlunit:htmlunit
- CVE-2023-24049An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor…
- CVE-2023-48910Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download.io.github.microcks:microcks
High 38
- CVE-2023-5808System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended…Hitachi Vantara System Management Unit
- CVE-2023-5944Delta Electronics DOPSoft Stack-based Buffer OverflowDelta Electronics DOPSoft
- CVE-2023-40465Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-40464Use of hardcoded certificate and private keySierraWireless ALEOS
- CVE-2023-40463Use of Hard-Coded CredentialsSierraWireless ALEOS
- CVE-2023-49285Denial of Service in HTTP Message Processing in Squidsquid-cache squid
- CVE-2023-40462Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-49286Denial of Service in Helper Process managementsquid-cache squid
- CVE-2023-40461Cross-site scripting vulnerability in ACEManagerSierraWireless ALEOS
- CVE-2023-40460Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-49288Denial of Service in HTTP Collapsed Forwarding in Squidsquid-cache squid
- CVE-2023-40459Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-40088In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after…Google Android
- CVE-2023-49280Data leak of password hash through xwiki change requestxwiki-contrib application-changerequest · org.xwiki.contrib…
- CVE-2023-5953Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File UploadWelcart e-Commerce
- CVE-2023-47633Uncontrolled Resource Consumption in Traefiktraefik · github.com/traefik/traefik/v2 +2
- CVE-2023-44302Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-6481Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fixQOS.CH Sarl logback · ch.qos.logback:logback-core
- CVE-2023-44305Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44304Dell DM5500 contains a privilege escalation vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44291Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-49287Buffer overflow vulnerabilities in tinydircxong tinydir
- CVE-2023-32843In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-42747In camera service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42740In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
Show all 38 entriesShow fewer entries
- CVE-2023-42736In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42716In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42694In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42688In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42685In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42681In ion service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-38003IBM Db2 command executionIBM Db2 for Linux, UNIX and Windows
- CVE-2023-24046An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in…
- CVE-2023-24047An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges…
- CVE-2023-24048Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via…
- CVE-2023-24051A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute…
- CVE-2023-24052An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password…
- CVE-2023-48863SEMCMS 3.9 is vulnerable to SQL Injection.
Medium, low and unrated 197
- CVE-2023-49289Cross-site Scripting in Ajax.NET Professionalmichaelschwarz Ajax.NET-Professional · AjaxNetProfessional
- CVE-2023-49284Command substitution output can trigger shell expansion in fish shellfish-shell
- CVE-2023-49290Malicious parameters can cause a denial of service in lestrrat-go/jwxlestrrat-go jwx · github.com/lestrrat-go/jwx +1
- CVE-2023-49292Possible private key restoration in go package github.com/ecies/goecies go · github.com/ecies/go/v2
- CVE-2023-49293Cross-site Scripting in `server.transformIndexHtml` via URL payload in vitevitejs vite · vite
- CVE-2023-45781In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-45779In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.Google Android
- CVE-2023-45777In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system…Google Android
- CVE-2023-45776In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-45775In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-45774In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy.Google Android
- CVE-2023-45773In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-40103In multiple locations, there is a possible way to corrupt memory due to a double free.Google Android
- CVE-2023-40098In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic…Google Android
- CVE-2023-40097In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation.Google Android
- CVE-2023-40096In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing…Google Android
- CVE-2023-40095In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check.Google Android
- CVE-2023-40094In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check.Google Android
- CVE-2023-40092In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy.Google Android
- CVE-2023-40091In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption.Google Android
- CVE-2023-40090In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure.Google Android
- CVE-2023-40089In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers…Google Android
- CVE-2023-40087In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-40084In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.Google Android
- CVE-2023-40083In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
Show all 197 entriesShow fewer entries
- CVE-2023-40082In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto.Google Android
- CVE-2023-40081In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40080In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code.Google Android
- CVE-2023-40079In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass.Google Android
- CVE-2023-40078In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer…Google Android
- CVE-2023-40076In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions…Google Android
- CVE-2023-40075In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check.Google Android
- CVE-2023-40074In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution…Google Android
- CVE-2023-40073In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy.Google Android
- CVE-2023-35690In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.Google Android
- CVE-2023-35668In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.Google Android
- CVE-2023-21403In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.Google Android
- CVE-2023-21402In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2023-21401In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-21263In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception.Google Android
- CVE-2023-21228In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21227In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure.Google Android
- CVE-2023-21218In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21217In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-21215In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition.Google Android
- CVE-2023-21164In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21163In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21162In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-5809Popup box < 3.8.6 - Admin+ Stored XSS in CategoriesPopup box
- CVE-2023-5141BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site ScriptingBSK Contact Form 7 Blacklist
- CVE-2023-6063WP Fastest Cache < 1.2.2 - Unauthenticated SQL InjectionWP Fastest Cache
- CVE-2023-5884Word Balloon < 4.20.3 - Avatar Removal via CSRFWord Balloon
- CVE-2023-5108Easy Newsletter Signups <= 1.0.4 - Admin+ SQLiEasy Newsletter Signups
- CVE-2023-5990Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRFInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2023-5210AMP+ Plus <= 3.0 - Reflected Cross Site ScriptingAMP+ Plus
- CVE-2023-4460Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVGUploading SVG, WEBP and ICO files
- CVE-2023-5951Welcart e-Commerce < 2.9.5 - Reflected XSSWelcart e-Commerce
- CVE-2023-5137Simply Excerpts <= 1.4 - Admin+ Stored XSSSimply Excerpts
- CVE-2023-5762Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar extFilr
- CVE-2023-5874Popup box < 3.8.6 - Admin+ Stored XSS in Popup SettingsPopup box
- CVE-2023-5952Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object InjectionWelcart e-Commerce
- CVE-2023-5105Frontend File Manager < 22.6 - Editor+ Arbitrary File DownloadFrontend File Manager Plugin
- CVE-2023-5979eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRFeCommerce Product Catalog Plugin for WordPress
- CVE-2023-49080Jupyter Server errors include tracebacks with path informationjupyter-server jupyter_server · jupyter-server
- CVE-2023-47106Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefiktraefik · github.com/traefik/traefik +2
- CVE-2023-47124Denial of service whith ACME HTTPChallenge in Traefiktraefik · github.com/traefik/traefik/v2 +2
- CVE-2023-5768A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series
- CVE-2023-5767A vulnerability exists in the webserver that affects the RTU500 series product versions listed below.Hitachi Energy RTU500
- CVE-2023-6460Information leak in nodejs-firestoreGoogle nodejs-firestore · @google-cloud/firestore
- CVE-2023-32804Mali GPU Userspace Driver can make an Out-of-Bounds accessArm Midgard GPU Userspace Driver · Arm Bifrost GPU Users… +2
- CVE-2023-44301Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44300Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44306Dell DM5500 contains a path traversal vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-5332Dependency on Vulnerable Third-Party Component in GitLabGitLab
- CVE-2023-49108Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a).Sumitomo Electric Information Systems Co. RakRak Document P…
- CVE-2023-32870In display drm, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32869In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32868In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32867In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32866In mmp, there is a possible memory corruption due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32865In display drm, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32864In display drm, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32863In display drm, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32862In display, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32861In display, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32860In display, there is a possible classic buffer overflow due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32859In meta, there is a possible classic buffer overflow due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32846In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32845In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32844In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32842In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32841In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32858In GZ, there is a possible information disclosure due to a missing data erasing.MediaTek MT6761, MT6765, MT6771, MT6835, MT6886, MT6983, MT…
- CVE-2023-32857In display, there is a possible out of bounds read due to an incorrect status check.MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…
- CVE-2023-32856In display, there is a possible out of bounds read due to an incorrect status check.MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…
- CVE-2023-32855In aee, there is a possible escalation of privilege due to a missing permission check.MediaTek MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT…
- CVE-2023-32854In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT…
- CVE-2023-32853In rpmb, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT…
- CVE-2023-32852In cameraisp, there is a possible information disclosure due to improper input validation.MediaTek MT6779
- CVE-2023-32849In cmdq, there is a possible out of bounds write due to type confusion.MediaTek MT6781, MT6785, MT6833, MT6853, MT6873, MT6885, MT…
- CVE-2023-32851In decoder, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…
- CVE-2023-32850In decoder, there is a possible out of bounds write due to an integer overflow.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…
- CVE-2023-32848In vdec, there is a possible out of bounds write due to type confusion.MediaTek MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2023-32847In audio, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT…
- CVE-2023-29258IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-40687IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-38727IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-42749In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42748In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42746In power manager, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42745In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42744In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42743In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42742In sysui, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42741In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42739In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42738In telocom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42737In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42735In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42734In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42733In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42732In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48464In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48463In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48462In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42751In gnss service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42731In Gnss service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616
- CVE-2023-42730In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42729In ril service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42728In phasecheckserver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42727In gpu driver, there is a possible out of bounds write due to a incorrect bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42726In TeleService, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42725In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42724In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42723In camera service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42722In camera service, there is a possible use after free due to a logic error.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42721In flv extractor, there is a possible missing verification incorrect input.Unisoc (Shanghai) Technologies Co. SC9863A
- CVE-2023-42720In video service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000
- CVE-2023-42719In video service, there is a possible out of bounds read due to a incorrect bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616
- CVE-2023-42718In dialer, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42717In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42715In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42714In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42713In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42712In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42711In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42710In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42709In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42708In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42707In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42706In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42705In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42704In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42703In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42702In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42701In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42700In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42699In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42698In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42697In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42696In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42695In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42693In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42692In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42691In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42690In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42689In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42687In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42686In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42684In gsp driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42683In gsp driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42682In gsp driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42680In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42679In gpu driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42678In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42677In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42676In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42675In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42674In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42673In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42672In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42671In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-47701IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-46167IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2022-46480Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012…
- CVE-2023-24050Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string…
- CVE-2023-26941Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the…
- CVE-2023-26942Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the…
- CVE-2023-26943Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the…
- CVE-2023-41613EzViz Studio v2.2.0 is vulnerable to DLL hijacking.
- CVE-2023-48799TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.
- CVE-2023-48800In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them…
- CVE-2023-48815kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
- CVE-2023-48866A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within…
- CVE-2023-48965An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to…
- CVE-2023-48966An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary…zoujingli/thinkadmin
- CVE-2023-48967Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.org.noear:solon