CVEs published March 7, 2023
169 CVEs were published on March 7, 2023: 10 critical, 54 high. 1 is now in CISA KEV.
- Published
- 169
- Critical
- 10
- High
- 54
- Medium
- 71
- Low
- 3
- Unrated
- 31
- Now in CISA KEV
- 1
- Fix available
- 52
Most affected products
- Qualcomm Snapdragon
- 25
- Google Chrome
- 24
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 24
- answerdev/answer · github.com/answerdev/answer
- 9
- Trend Micro Apex One
- 6
- backupguard JetBackup – Backup, Restore & Migrate
- 3
- funadmin/funadmin
- 3
- MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…
- 3
- MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT…
- 3
- Fortinet FortiAnalyzer
- 2
Critical 10
- CVE-2023-25143An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote cTrend Micro Apex One
- CVE-2023-27479Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-uixwiki-platform · org.xwiki.platform:xwiki-platform-panels-ui
- CVE-2023-25690Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxyApache Software Foundation Apache HTTP Server
- CVE-2022-3760SQLi in Mia-MedMia Technology Mia-Med
- CVE-2022-33257Time-of-check time-of-use race condition in CoreQualcomm Snapdragon
- CVE-2022-33256Improper validation of array index in Multi-mode call processorQualcomm Snapdragon
- CVE-2023-1244Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-24775Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.funadmin/funadmin
- CVE-2023-24780Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.funadmin/funadmin
- CVE-2023-24781Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.funadmin/funadmin
High 54
- CVE-2023-27476XML External Entity (XXE) Injection in OWSLibgeopython OWSLib · owslib
- CVE-2023-25148A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing Trend Micro Apex One
- CVE-2023-25146A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete thTrend Micro Apex One
- CVE-2023-25145A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges onTrend Micro Apex One
- CVE-2023-25144An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and creaTrend Micro Apex One
- CVE-2023-1228Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigationGoogle Chrome
- CVE-2023-1227Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specifiGoogle Chrome
- CVE-2023-1222Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruptiGoogle Chrome
- CVE-2023-1220Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to poGoogle Chrome
- CVE-2023-1219Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process tGoogle Chrome
- CVE-2023-1218Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafGoogle Chrome
- CVE-2023-1216Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in directGoogle Chrome
- CVE-2023-1215Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2023-1214Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2023-1213Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via aGoogle Chrome
- CVE-2023-27480Data leak through a XAR import XXE attack in xwiki-platform-xar-modelxwiki-platform · org.xwiki.platform:xwiki-platform-xar-model
- CVE-2023-27475Goutil vulnerable to path traversal when unzipping filesgookit goutil · github.com/gookit/goutil
- CVE-2023-1257CVE-2023-1257MOXA UC-8580 Series · MOXA UC-8540 Series +8
- CVE-2022-42476A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOSFortinet FortiOS · Fortinet FortiProxy
- CVE-2022-40676A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.Fortinet FortiNAC
- CVE-2022-39953A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6, FortiNAC version 9.1Fortinet FortiNAC
- CVE-2022-39951A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.Fortinet FortiWeb
- CVE-2023-25605A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interfaceFortinet FortiSOAR
- CVE-2023-27522Apache HTTP Server: mod_proxy_uwsgi HTTP response splittingApache Software Foundation Apache HTTP Server · uwsgi
- CVE-2023-1253SourceCodester Health Center Patient Record Management System login.php sql injectionSourceCodester Health Center Patient Record Management Syst…
- CVE-2021-4331The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Privilege Escalationposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2021-4330Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Uploadenvato Template Kit – Import · Envato Elements – Photos & E…
- CVE-2020-36669JetBackup – WP Backup, Migrate & Restore <= 1.3.9 - Cross-Site Request Forgery to Arbitrary File Uploadbackupguard JetBackup – Backup, Restore & Migrate
- CVE-2022-40540Buffer copy without checking the size of input in Linux KernelQualcomm Snapdragon
- CVE-2022-40539Improper Validation of Array Index in Automotive Android OSQualcomm Snapdragon
- CVE-2022-40537Improper Validation of Array Index in Bluetooth HOSTQualcomm Snapdragon
- CVE-2022-40535Buffer Over-read in WLANQualcomm Snapdragon
- CVE-2022-40531Incorrect type conversion in WLANQualcomm Snapdragon
- CVE-2022-40530Integer overflow to buffer overflow in WLANQualcomm Snapdragon
- CVE-2022-40527Reachable Assertion in WLAN Embedded SWQualcomm Snapdragon
- CVE-2022-40515Double free in VideoQualcomm Snapdragon
- CVE-2022-33309Buiffer over-read in WLAN Firmware.Qualcomm Snapdragon
- CVE-2022-33278Buffer copy without checking the size of input in HLOSQualcomm Snapdragon
- CVE-2022-33272Reachable assertion in ModemQualcomm Snapdragon
- CVE-2022-33254Reachable assertion in ModemQualcomm Snapdragon
- CVE-2022-33250Reachable assertion in ModemQualcomm Snapdragon
- CVE-2022-33244Reachable assertion in ModemQualcomm Snapdragon
- CVE-2022-33242Improper authentication in Qualcomm IPCQualcomm Snapdragon
- CVE-2022-33213Memory Corruption in MODEMQualcomm Snapdragon
- CVE-2022-25709Use of Out-of-range Pointer Offset in Data ModemQualcomm Snapdragon
- CVE-2022-25705Integer Overflow to Buffer Overflow in ModemQualcomm Snapdragon
- CVE-2022-25694Use of Out-of-range Pointer Offset in MODEMQualcomm Snapdragon
- CVE-2022-25655Buffer copy without checking the size of input in WLAN HAL.Qualcomm Snapdragon
- CVE-2023-1238Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1240Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1241Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1242Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-23554Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1.IVM Development Group pg_ivm
- CVE-2023-25223CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.
Medium, low and unrated 105
- CVE-2023-25147An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypaTrend Micro Apex One
- CVE-2023-1236Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframeGoogle Chrome
- CVE-2023-1235Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potGoogle Chrome
- CVE-2023-1234Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofGoogle Chrome
- CVE-2023-1233Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to instaGoogle Chrome
- CVE-2023-1232Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sGoogle Chrome
- CVE-2023-1231Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof tGoogle Chrome
- CVE-2023-1230Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user Google Chrome
- CVE-2023-1229Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation reGoogle Chrome
- CVE-2023-1226Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content secuGoogle Chrome
- CVE-2023-1225Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same originGoogle Chrome
- CVE-2023-1224Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation rGoogle Chrome
- CVE-2023-1223Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origiGoogle Chrome
- CVE-2023-1221Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to instalGoogle Chrome
- CVE-2023-1217Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised thGoogle Chrome
- CVE-2023-1263CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information ExposureCMP – Coming Soon & Maintenance Plugin by NiteoThemes
- CVE-2023-27485Insufficient verification of authorisation when accessing subresults in thmmniii/fbs-corethm-mni-ii feedbacksystem
- CVE-2023-27481Extract password hashes through export querying in directusdirectus
- CVE-2023-27478Disclosure of unrelated data in libmemcached-awesome awesomized libmemcached
- CVE-2022-41329An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2.0 through 7.2.1 andFortinet FortiProxy · Fortinet FortiOS
- CVE-2022-45861An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-27490A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0Fortinet FortiManager · Fortinet FortiAnalyzer +2
- CVE-2022-41328A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 thFortinet FortiOS
- CVE-2022-22297An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb verFortinet FortiRecorder · Fortinet FortiWeb
- CVE-2023-23776An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 tFortinet FortiAnalyzer
- CVE-2022-41333An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authenticationFortinet FortiRecorder
- CVE-2023-25611A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 Fortinet FortiAnalyzer
- CVE-2020-36670NEX-Forms <= 7.7.1 - Missing Authorization on Various AJAX Actionswebaways NEX-Forms – Ultimate Forms Plugin for WordPress
- CVE-2023-1254SourceCodester Health Center Patient Record Management System birthing_print.php cross site scriptingSourceCodester Health Center Patient Record Management Syst…
- CVE-2021-4333WP Statistics <= 13.1.1 - Cross-Site Request Forgery to Arbitrary Plugin Activation and Deactivationveronalabs WP Statistics – Simple, privacy-friendly Google…
- CVE-2022-4932Total Upkeep <= 1.14.13 - Missing Authorization to Authenticated (Subscriber+) Information DisclosureTotal Upkeep – WordPress Backup Plugin plus Restore & Migra…
- CVE-2022-4931The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12.willmot BackUpWordPress
- CVE-2015-10087UpThemes Theme DesignFolio Plus unrestricted uploadUpThemes Theme DesignFolio Plus
- CVE-2021-4332The Plus Addons for Elementor PRO <= 4.1.9 & The Plus Addons for Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Readposimyththemes The Plus Addons for Elementor – Addons for E…
- CVE-2020-36668JetBackup – WP Backup, Migrate & Restore <= 1.4.0 - Sensitive Information Disclosurebackupguard JetBackup – Backup, Restore & Migrate
- CVE-2020-36667JetBackup – WP Backup, Migrate & Restore <= 1.4.1 - Missing Authorization to Unauthorized Backup Location Changebackupguard JetBackup – Backup, Restore & Migrate
- CVE-2021-44197XSS in UBIT Information Technologies Student Information Management SystemUBIT Information Technologies Student Information Managemen…
- CVE-2021-44196XSS in UBIT Information Technologies Student Information Management SystemUBIT Information Technologies Student Information Managemen…
- CVE-2022-33260Stack based buffer overflow in CoreQualcomm Snapdragon
- CVE-2022-33245Use after free in WLANQualcomm Snapdragon
- CVE-2022-22075Information Exposure in GraphicsQualcomm Snapdragon
- CVE-2022-47459In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47458In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47457In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47456In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47455In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47454In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47453In wcn service, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47484In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47483In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47482In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47481In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47480In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47479In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47478In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47477In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47476In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47475In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47474In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47471In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47473In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47472In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47462In telephone service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47461In telephone service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47460In gpu device, there is a memory corruption due to a use after free.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-46257Information disclosure in GitHub Enterprise Server leading to unauthorized viewing of private repository namesGitHub Enterprise Server
- CVE-2023-1237Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1239Cross-site Scripting (XSS) - Reflected in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1243Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1245Cross-site Scripting (XSS) - Stored in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-1264NULL Pointer Dereference in vim/vimvim/vim
- CVE-2023-20620In adsp, there is a possible escalation of privilege due to a logic error.MediaTek MT6879, MT6895, MT6983
- CVE-2023-20621In tinysys, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6771, MT6789, MT…
- CVE-2023-20623In ion, there is a possible escalation of privilege due to improper locking.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…
- CVE-2023-20624In vow, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT…
- CVE-2023-20625In adsp, there is a possible double free due to a race condition.MediaTek MT6739, MT6761, MT6765, MT6768, MT6769, MT6779, MT…
- CVE-2023-20626In msdc, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2023-20627In pqframework, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8167, MT8168
- CVE-2023-20628In thermal, there is a possible memory corruption due to an uncaught exception.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…
- CVE-2023-20630In usb, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…
- CVE-2023-20632In usb, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…
- CVE-2023-20633In usb, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…
- CVE-2023-20634In widevine, there is a possible out of bounds write due to improper input validation.MediaTek MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT…
- CVE-2023-20635In keyinstall, there is a possible information disclosure due to an integer overflow.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20636In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6895, MT6985, MT8168, MT8781
- CVE-2023-20637In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT…
- CVE-2023-20638In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6753, MT6761, MT6762, MT6763, MT6765, MT…
- CVE-2023-20639In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT…
- CVE-2023-20640In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8791, MT8791T, MT8797
- CVE-2023-20641In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8791, MT8791T, MT8797
- CVE-2023-20642In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT…
- CVE-2023-20643In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- CVE-2023-20644In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT…
- CVE-2023-20645In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6763, MT6765, MT6769, MT…
- CVE-2023-20646In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD,…
- CVE-2023-20647In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT…
- CVE-2023-20648In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT…
- CVE-2023-20649In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT…
- CVE-2023-20650In apu, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, M…
- CVE-2023-20651In apu, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6853, MT6853T, MT6875, MT6877, MT6879, MT6883, M…
- CVE-2023-22847Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1.IVM Development Group pg_ivm
- CVE-2023-25230A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulati
- CVE-2023-26953onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module.
- CVE-2023-26954onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module.
- CVE-2023-26955onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module.