# CVEs published 2023-12-04

242 CVEs were published on December 4, 2023: 7 critical, 38 high. Days are UTC.

- [CVE-2023-5808](https://cve.now/CVE-2023-5808.md): System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended… (CVSS 7.6, Hitachi Vantara System Management Unit)
- [CVE-2023-49289](https://cve.now/CVE-2023-49289.md): Cross-site Scripting in Ajax.NET Professional (CVSS 6.3, michaelschwarz Ajax.NET-Professional · AjaxNetProfessional)
- [CVE-2023-49284](https://cve.now/CVE-2023-49284.md): Command substitution output can trigger shell expansion in fish shell (CVSS 3.9, fish-shell)
- [CVE-2023-49290](https://cve.now/CVE-2023-49290.md): Malicious parameters can cause a denial of service in lestrrat-go/jwx (CVSS 5.3, lestrrat-go jwx · github.com/lestrrat-go/jwx +1)
- [CVE-2023-49291](https://cve.now/CVE-2023-49291.md): Improper Sanitization of Branch Name Leads to Arbitrary Code Injection (CVSS 9.3, tj-actions branch-names)
- [CVE-2023-49292](https://cve.now/CVE-2023-49292.md): Possible private key restoration in go package github.com/ecies/go (CVSS 4.9, ecies go · github.com/ecies/go/v2)
- [CVE-2023-5944](https://cve.now/CVE-2023-5944.md): Delta Electronics DOPSoft Stack-based Buffer Overflow (CVSS 7.8, Delta Electronics DOPSoft)
- [CVE-2023-49293](https://cve.now/CVE-2023-49293.md): Cross-site Scripting in \`server.transformIndexHtml\` via URL payload in vite (CVSS 6.1, vitejs vite · vite)
- [CVE-2023-40465](https://cve.now/CVE-2023-40465.md): Improper input leads to DoS (CVSS 8.3, SierraWireless ALEOS)
- [CVE-2023-40464](https://cve.now/CVE-2023-40464.md): Use of hardcoded certificate and private key (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-40463](https://cve.now/CVE-2023-40463.md): Use of Hard-Coded Credentials (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-49285](https://cve.now/CVE-2023-49285.md): Denial of Service in HTTP Message Processing in Squid (CVSS 8.6, squid-cache squid)
- [CVE-2023-40462](https://cve.now/CVE-2023-40462.md): Improper input leads to DoS (CVSS 7.5, SierraWireless ALEOS)
- [CVE-2023-49286](https://cve.now/CVE-2023-49286.md): Denial of Service in Helper Process management (CVSS 8.6, squid-cache squid)
- [CVE-2023-40461](https://cve.now/CVE-2023-40461.md): Cross-site scripting vulnerability in ACEManager (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-40460](https://cve.now/CVE-2023-40460.md): Improper input leads to DoS (CVSS 7.1, SierraWireless ALEOS)
- [CVE-2023-49288](https://cve.now/CVE-2023-49288.md): Denial of Service in HTTP Collapsed Forwarding in Squid (CVSS 8.6, squid-cache squid)
- [CVE-2023-40459](https://cve.now/CVE-2023-40459.md): Improper input leads to DoS (CVSS 7.5, SierraWireless ALEOS)
- [CVE-2023-45781](https://cve.now/CVE-2023-45781.md): In parse\_gap\_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45779](https://cve.now/CVE-2023-45779.md): In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2023-45777](https://cve.now/CVE-2023-45777.md): In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system… (no CVSS, Google Android)
- [CVE-2023-45776](https://cve.now/CVE-2023-45776.md): In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45775](https://cve.now/CVE-2023-45775.md): In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45774](https://cve.now/CVE-2023-45774.md): In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-45773](https://cve.now/CVE-2023-45773.md): In multiple functions of btm\_ble\_gap.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40103](https://cve.now/CVE-2023-40103.md): In multiple locations, there is a possible way to corrupt memory due to a double free. (no CVSS, Google Android)
- [CVE-2023-40098](https://cve.now/CVE-2023-40098.md): In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic… (no CVSS, Google Android)
- [CVE-2023-40097](https://cve.now/CVE-2023-40097.md): In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-40096](https://cve.now/CVE-2023-40096.md): In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing… (no CVSS, Google Android)
- [CVE-2023-40095](https://cve.now/CVE-2023-40095.md): In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. (no CVSS, Google Android)
- [CVE-2023-40094](https://cve.now/CVE-2023-40094.md): In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-40092](https://cve.now/CVE-2023-40092.md): In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40091](https://cve.now/CVE-2023-40091.md): In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. (no CVSS, Google Android)
- [CVE-2023-40090](https://cve.now/CVE-2023-40090.md): In BTM\_BleVerifySignature of btm\_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. (no CVSS, Google Android)
- [CVE-2023-40089](https://cve.now/CVE-2023-40089.md): In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers… (no CVSS, Google Android)
- [CVE-2023-40088](https://cve.now/CVE-2023-40088.md): In callback\_thread\_event of com\_android\_bluetooth\_btservice\_AdapterService.cpp, there is a possible memory corruption due to a use after… (CVSS 8.8, Google Android)
- [CVE-2023-40087](https://cve.now/CVE-2023-40087.md): In transcodeQ\*ToFloat of btif\_avrcp\_audio\_track.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40084](https://cve.now/CVE-2023-40084.md): In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. (no CVSS, Google Android)
- [CVE-2023-40083](https://cve.now/CVE-2023-40083.md): In parse\_gap\_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40082](https://cve.now/CVE-2023-40082.md): In modify\_for\_next\_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2023-40081](https://cve.now/CVE-2023-40081.md): In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40080](https://cve.now/CVE-2023-40080.md): In multiple functions of btm\_ble\_gap.cc, there is a possible out of bounds write due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-40079](https://cve.now/CVE-2023-40079.md): In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. (no CVSS, Google Android)
- [CVE-2023-40078](https://cve.now/CVE-2023-40078.md): In a2dp\_vendor\_opus\_decoder\_decode\_packet of a2dp\_vendor\_opus\_decoder.cc, there is a possible out of bounds write due to a heap buffer… (no CVSS, Google Android)
- [CVE-2023-40077](https://cve.now/CVE-2023-40077.md): In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. (CVSS 9.8, Google Android)
- [CVE-2023-40076](https://cve.now/CVE-2023-40076.md): In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions… (CVSS 5.5, Google Android)
- [CVE-2023-40075](https://cve.now/CVE-2023-40075.md): In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40074](https://cve.now/CVE-2023-40074.md): In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution… (no CVSS, Google Android)
- [CVE-2023-40073](https://cve.now/CVE-2023-40073.md): In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. (no CVSS, Google Android)
- [CVE-2023-35690](https://cve.now/CVE-2023-35690.md): In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-35668](https://cve.now/CVE-2023-35668.md): In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21403](https://cve.now/CVE-2023-21403.md): In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-21402](https://cve.now/CVE-2023-21402.md): In MMU\_UnmapPages of mmu\_common.c, there is a possible out of bounds read due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-21401](https://cve.now/CVE-2023-21401.md): In DevmemIntChangeSparse of devicemem\_server.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-21263](https://cve.now/CVE-2023-21263.md): In OSMMapPMRGeneric of pmr\_os.c, there is a possible out of bounds write due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-21228](https://cve.now/CVE-2023-21228.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21227](https://cve.now/CVE-2023-21227.md): In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. (no CVSS, Google Android)
- [CVE-2023-21218](https://cve.now/CVE-2023-21218.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21217](https://cve.now/CVE-2023-21217.md): In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-21216](https://cve.now/CVE-2023-21216.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible arbitrary code execution due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2023-21215](https://cve.now/CVE-2023-21215.md): In DevmemIntAcquireRemoteCtx of devicemem\_server.c, there is a possible arbitrary code execution due to a race condition. (no CVSS, Google Android)
- [CVE-2023-21166](https://cve.now/CVE-2023-21166.md): In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2023-21164](https://cve.now/CVE-2023-21164.md): In DevmemIntMapPMR of devicemem\_server.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-21163](https://cve.now/CVE-2023-21163.md): In PMR\_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-21162](https://cve.now/CVE-2023-21162.md): In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-49280](https://cve.now/CVE-2023-49280.md): Data leak of password hash through xwiki change request (CVSS 7.7, xwiki-contrib application-changerequest · org.xwiki.contrib…)
- [CVE-2023-5809](https://cve.now/CVE-2023-5809.md): Popup box \< 3.8.6 - Admin+ Stored XSS in Categories (no CVSS, Popup box)
- [CVE-2023-5141](https://cve.now/CVE-2023-5141.md): BSK Contact Form 7 Blacklist \<= 1.0.1 - Reflected Cross-Site Scripting (no CVSS, BSK Contact Form 7 Blacklist)
- [CVE-2023-6063](https://cve.now/CVE-2023-6063.md): WP Fastest Cache \< 1.2.2 - Unauthenticated SQL Injection (no CVSS, WP Fastest Cache)
- [CVE-2023-5884](https://cve.now/CVE-2023-5884.md): Word Balloon \< 4.20.3 - Avatar Removal via CSRF (no CVSS, Word Balloon)
- [CVE-2023-5108](https://cve.now/CVE-2023-5108.md): Easy Newsletter Signups \<= 1.0.4 - Admin+ SQLi (no CVSS, Easy Newsletter Signups)
- [CVE-2023-5990](https://cve.now/CVE-2023-5990.md): Funnelforms Free \< 3.4.2 - Form Deletion/Duplication via CSRF (no CVSS, Interactive Contact Form and Multi Step Form Builder with D…)
- [CVE-2023-5210](https://cve.now/CVE-2023-5210.md): AMP+ Plus \<= 3.0 - Reflected Cross Site Scripting (no CVSS, AMP+ Plus)
- [CVE-2023-4460](https://cve.now/CVE-2023-4460.md): Uploading SVG, WEBP and ICO files \<= 1.2.1 - Author+ Stored XSS via SVG (CVSS 6.1, Uploading SVG, WEBP and ICO files)
- [CVE-2023-5951](https://cve.now/CVE-2023-5951.md): Welcart e-Commerce \< 2.9.5 - Reflected XSS (CVSS 6.1, Welcart e-Commerce)
- [CVE-2023-5137](https://cve.now/CVE-2023-5137.md): Simply Excerpts \<= 1.4 - Admin+ Stored XSS (CVSS 4.8, Simply Excerpts)
- [CVE-2023-5762](https://cve.now/CVE-2023-5762.md): Filr – Secure document library \< 1.2.3.6 - Author+ RCE via file upload with phar ext (no CVSS, Filr)
- [CVE-2023-5874](https://cve.now/CVE-2023-5874.md): Popup box \< 3.8.6 - Admin+ Stored XSS in Popup Settings (no CVSS, Popup box)
- [CVE-2023-5953](https://cve.now/CVE-2023-5953.md): Welcart e-Commerce \< 2.9.5 - Subscriber+ Arbitrary File Upload (CVSS 8.8, Welcart e-Commerce)
- [CVE-2023-5952](https://cve.now/CVE-2023-5952.md): Welcart e-Commerce \< 2.9.5 - Unauthenticated PHP Object Injection (no CVSS, Welcart e-Commerce)
- [CVE-2023-5105](https://cve.now/CVE-2023-5105.md): Frontend File Manager \< 22.6 - Editor+ Arbitrary File Download (no CVSS, Frontend File Manager Plugin)
- [CVE-2023-5979](https://cve.now/CVE-2023-5979.md): eCommerce Product Catalog Plugin for WordPress \< 3.3.26 - Products Deletion via CSRF (no CVSS, eCommerce Product Catalog Plugin for WordPress)
- [CVE-2023-49080](https://cve.now/CVE-2023-49080.md): Jupyter Server errors include tracebacks with path information (CVSS 3.5, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2023-47633](https://cve.now/CVE-2023-47633.md): Uncontrolled Resource Consumption in Traefik (CVSS 7.5, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2023-47106](https://cve.now/CVE-2023-47106.md): Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik (CVSS 4.8, traefik · github.com/traefik/traefik +2)
- [CVE-2023-47124](https://cve.now/CVE-2023-47124.md): Denial of service whith ACME HTTPChallenge in Traefik (CVSS 5.9, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2023-5768](https://cve.now/CVE-2023-5768.md): A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. (CVSS 5.9, Hitachi Energy RTU500 series)
- [CVE-2023-5767](https://cve.now/CVE-2023-5767.md): A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. (CVSS 6.0, Hitachi Energy RTU500)
- [CVE-2023-6460](https://cve.now/CVE-2023-6460.md): Information leak in nodejs-firestore (CVSS 4.0, Google nodejs-firestore · @google-cloud/firestore)
- [CVE-2023-32804](https://cve.now/CVE-2023-32804.md): Mali GPU Userspace Driver can make an Out-of-Bounds access (no CVSS, Arm Midgard GPU Userspace Driver · Arm Bifrost GPU Users… +2)
- [CVE-2023-44302](https://cve.now/CVE-2023-44302.md): Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. (CVSS 8.1, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44301](https://cve.now/CVE-2023-44301.md): Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. (CVSS 5.4, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44300](https://cve.now/CVE-2023-44300.md): Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. (CVSS 5.5, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-6481](https://cve.now/CVE-2023-6481.md): Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix (CVSS 7.1, QOS.CH Sarl logback · ch.qos.logback:logback-core)
- [CVE-2023-44306](https://cve.now/CVE-2023-44306.md): Dell DM5500 contains a path traversal vulnerability in the appliance. (CVSS 6.5, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44305](https://cve.now/CVE-2023-44305.md): Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. (CVSS 8.1, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44304](https://cve.now/CVE-2023-44304.md): Dell DM5500 contains a privilege escalation vulnerability in the appliance. (CVSS 8.8, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44291](https://cve.now/CVE-2023-44291.md): Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. (CVSS 7.2, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-5332](https://cve.now/CVE-2023-5332.md): Dependency on Vulnerable Third-Party Component in GitLab (CVSS 5.9, GitLab)
- [CVE-2023-49287](https://cve.now/CVE-2023-49287.md): Buffer overflow vulnerabilities in tinydir (CVSS 7.7, cxong tinydir)
- [CVE-2023-49108](https://cve.now/CVE-2023-49108.md): Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). (no CVSS, Sumitomo Electric Information Systems Co. RakRak Document P…)
- [CVE-2023-49093](https://cve.now/CVE-2023-49093.md): HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL (CVSS 9.8, htmlunit · org.htmlunit:htmlunit)
- [CVE-2023-32870](https://cve.now/CVE-2023-32870.md): In display drm, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32869](https://cve.now/CVE-2023-32869.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32868](https://cve.now/CVE-2023-32868.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32867](https://cve.now/CVE-2023-32867.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32866](https://cve.now/CVE-2023-32866.md): In mmp, there is a possible memory corruption due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32865](https://cve.now/CVE-2023-32865.md): In display drm, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32864](https://cve.now/CVE-2023-32864.md): In display drm, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32863](https://cve.now/CVE-2023-32863.md): In display drm, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.7, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32862](https://cve.now/CVE-2023-32862.md): In display, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32861](https://cve.now/CVE-2023-32861.md): In display, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32860](https://cve.now/CVE-2023-32860.md): In display, there is a possible classic buffer overflow due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32859](https://cve.now/CVE-2023-32859.md): In meta, there is a possible classic buffer overflow due to a missing bounds check. (CVSS 6.7, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32846](https://cve.now/CVE-2023-32846.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32845](https://cve.now/CVE-2023-32845.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32844](https://cve.now/CVE-2023-32844.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32843](https://cve.now/CVE-2023-32843.md): In 5G Modem, there is a possible system crash due to improper error handling. (CVSS 7.5, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32842](https://cve.now/CVE-2023-32842.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32841](https://cve.now/CVE-2023-32841.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32858](https://cve.now/CVE-2023-32858.md): In GZ, there is a possible information disclosure due to a missing data erasing. (no CVSS, MediaTek MT6761, MT6765, MT6771, MT6835, MT6886, MT6983, MT…)
- [CVE-2023-32857](https://cve.now/CVE-2023-32857.md): In display, there is a possible out of bounds read due to an incorrect status check. (no CVSS, MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32856](https://cve.now/CVE-2023-32856.md): In display, there is a possible out of bounds read due to an incorrect status check. (no CVSS, MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32855](https://cve.now/CVE-2023-32855.md): In aee, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT…)
- [CVE-2023-32854](https://cve.now/CVE-2023-32854.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT…)
- [CVE-2023-32853](https://cve.now/CVE-2023-32853.md): In rpmb, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2023-32852](https://cve.now/CVE-2023-32852.md): In cameraisp, there is a possible information disclosure due to improper input validation. (no CVSS, MediaTek MT6779)
- [CVE-2023-32849](https://cve.now/CVE-2023-32849.md): In cmdq, there is a possible out of bounds write due to type confusion. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6873, MT6885, MT…)
- [CVE-2023-32851](https://cve.now/CVE-2023-32851.md): In decoder, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…)
- [CVE-2023-32850](https://cve.now/CVE-2023-32850.md): In decoder, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…)
- [CVE-2023-32848](https://cve.now/CVE-2023-32848.md): In vdec, there is a possible out of bounds write due to type confusion. (CVSS 6.7, MediaTek MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2023-32847](https://cve.now/CVE-2023-32847.md): In audio, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT…)
- [CVE-2023-29258](https://cve.now/CVE-2023-29258.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-40687](https://cve.now/CVE-2023-40687.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38727](https://cve.now/CVE-2023-38727.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-42749](https://cve.now/CVE-2023-42749.md): In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42748](https://cve.now/CVE-2023-42748.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42747](https://cve.now/CVE-2023-42747.md): In camera service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42746](https://cve.now/CVE-2023-42746.md): In power manager, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42745](https://cve.now/CVE-2023-42745.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42744](https://cve.now/CVE-2023-42744.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42743](https://cve.now/CVE-2023-42743.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42742](https://cve.now/CVE-2023-42742.md): In sysui, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42741](https://cve.now/CVE-2023-42741.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42740](https://cve.now/CVE-2023-42740.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42739](https://cve.now/CVE-2023-42739.md): In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42738](https://cve.now/CVE-2023-42738.md): In telocom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42737](https://cve.now/CVE-2023-42737.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42736](https://cve.now/CVE-2023-42736.md): In telecom service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42735](https://cve.now/CVE-2023-42735.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42734](https://cve.now/CVE-2023-42734.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42733](https://cve.now/CVE-2023-42733.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42732](https://cve.now/CVE-2023-42732.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48464](https://cve.now/CVE-2022-48464.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48463](https://cve.now/CVE-2022-48463.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48462](https://cve.now/CVE-2022-48462.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42751](https://cve.now/CVE-2023-42751.md): In gnss service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42731](https://cve.now/CVE-2023-42731.md): In Gnss service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616)
- [CVE-2023-42730](https://cve.now/CVE-2023-42730.md): In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42729](https://cve.now/CVE-2023-42729.md): In ril service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42728](https://cve.now/CVE-2023-42728.md): In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42727](https://cve.now/CVE-2023-42727.md): In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42726](https://cve.now/CVE-2023-42726.md): In TeleService, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42725](https://cve.now/CVE-2023-42725.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42724](https://cve.now/CVE-2023-42724.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42723](https://cve.now/CVE-2023-42723.md): In camera service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42722](https://cve.now/CVE-2023-42722.md): In camera service, there is a possible use after free due to a logic error. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42721](https://cve.now/CVE-2023-42721.md): In flv extractor, there is a possible missing verification incorrect input. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A)
- [CVE-2023-42720](https://cve.now/CVE-2023-42720.md): In video service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000)
- [CVE-2023-42719](https://cve.now/CVE-2023-42719.md): In video service, there is a possible out of bounds read due to a incorrect bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616)
- [CVE-2023-42718](https://cve.now/CVE-2023-42718.md): In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42717](https://cve.now/CVE-2023-42717.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42716](https://cve.now/CVE-2023-42716.md): In telephony service, there is a possible missing permission check. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42715](https://cve.now/CVE-2023-42715.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42714](https://cve.now/CVE-2023-42714.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42713](https://cve.now/CVE-2023-42713.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42712](https://cve.now/CVE-2023-42712.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42711](https://cve.now/CVE-2023-42711.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42710](https://cve.now/CVE-2023-42710.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42709](https://cve.now/CVE-2023-42709.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42708](https://cve.now/CVE-2023-42708.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42707](https://cve.now/CVE-2023-42707.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42706](https://cve.now/CVE-2023-42706.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42705](https://cve.now/CVE-2023-42705.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42704](https://cve.now/CVE-2023-42704.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42703](https://cve.now/CVE-2023-42703.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42702](https://cve.now/CVE-2023-42702.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42701](https://cve.now/CVE-2023-42701.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42700](https://cve.now/CVE-2023-42700.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42699](https://cve.now/CVE-2023-42699.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42698](https://cve.now/CVE-2023-42698.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42697](https://cve.now/CVE-2023-42697.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42696](https://cve.now/CVE-2023-42696.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42695](https://cve.now/CVE-2023-42695.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42694](https://cve.now/CVE-2023-42694.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42693](https://cve.now/CVE-2023-42693.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42692](https://cve.now/CVE-2023-42692.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42691](https://cve.now/CVE-2023-42691.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42690](https://cve.now/CVE-2023-42690.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42689](https://cve.now/CVE-2023-42689.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42688](https://cve.now/CVE-2023-42688.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42687](https://cve.now/CVE-2023-42687.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42686](https://cve.now/CVE-2023-42686.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42685](https://cve.now/CVE-2023-42685.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42684](https://cve.now/CVE-2023-42684.md): In gsp driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42683](https://cve.now/CVE-2023-42683.md): In gsp driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42682](https://cve.now/CVE-2023-42682.md): In gsp driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42681](https://cve.now/CVE-2023-42681.md): In ion service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42680](https://cve.now/CVE-2023-42680.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42679](https://cve.now/CVE-2023-42679.md): In gpu driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42678](https://cve.now/CVE-2023-42678.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42677](https://cve.now/CVE-2023-42677.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42676](https://cve.now/CVE-2023-42676.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42675](https://cve.now/CVE-2023-42675.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42674](https://cve.now/CVE-2023-42674.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42673](https://cve.now/CVE-2023-42673.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42672](https://cve.now/CVE-2023-42672.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42671](https://cve.now/CVE-2023-42671.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-47701](https://cve.now/CVE-2023-47701.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38003](https://cve.now/CVE-2023-38003.md): IBM Db2 command execution (CVSS 7.2, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-46167](https://cve.now/CVE-2023-46167.md): IBM Db2 denial of service (CVSS 5.9, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2022-46480](https://cve.now/CVE-2022-46480.md): Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012… (no CVSS)
- [CVE-2023-24046](https://cve.now/CVE-2023-24046.md): An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in… (CVSS 8.8)
- [CVE-2023-24047](https://cve.now/CVE-2023-24047.md): An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges… (CVSS 8.0)
- [CVE-2023-24048](https://cve.now/CVE-2023-24048.md): Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via… (CVSS 8.8)
- [CVE-2023-24049](https://cve.now/CVE-2023-24049.md): An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor… (CVSS 9.8)
- [CVE-2023-24050](https://cve.now/CVE-2023-24050.md): Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string… (no CVSS)
- [CVE-2023-24051](https://cve.now/CVE-2023-24051.md): A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute… (CVSS 8.8)
- [CVE-2023-24052](https://cve.now/CVE-2023-24052.md): An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password… (CVSS 8.8)
- [CVE-2023-26941](https://cve.now/CVE-2023-26941.md): Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the… (no CVSS)
- [CVE-2023-26942](https://cve.now/CVE-2023-26942.md): Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the… (no CVSS)
- [CVE-2023-26943](https://cve.now/CVE-2023-26943.md): Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the… (no CVSS)
- [CVE-2023-41613](https://cve.now/CVE-2023-41613.md): EzViz Studio v2.2.0 is vulnerable to DLL hijacking. (no CVSS)
- [CVE-2023-48799](https://cve.now/CVE-2023-48799.md): TOTOLINK-X6000R Firmware-V9.4.0cu.852\_B20230719 is vulnerable to Command Execution. (no CVSS)
- [CVE-2023-48800](https://cve.now/CVE-2023-48800.md): In TOTOLINK X6000R\_Firmware V9.4.0cu.852\_B20230719, the shttpd file sub\_417338 function obtains fields from the front-end, connects them… (no CVSS)
- [CVE-2023-48815](https://cve.now/CVE-2023-48815.md): kkFileView v4.3.0 is vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-48863](https://cve.now/CVE-2023-48863.md): SEMCMS 3.9 is vulnerable to SQL Injection. (CVSS 7.5)
- [CVE-2023-48866](https://cve.now/CVE-2023-48866.md): A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within… (no CVSS)
- [CVE-2023-48910](https://cve.now/CVE-2023-48910.md): Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. (CVSS 9.8, io.github.microcks:microcks)
- [CVE-2023-48965](https://cve.now/CVE-2023-48965.md): An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to… (no CVSS)
- [CVE-2023-48966](https://cve.now/CVE-2023-48966.md): An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary… (no CVSS, zoujingli/thinkadmin)
- [CVE-2023-48967](https://cve.now/CVE-2023-48967.md): Ssolon \<= 2.6.0 and \<=2.5.12 is vulnerable to Deserialization of Untrusted Data. (no CVSS, org.noear:solon)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2023-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.