CVEs published March 24, 2023
197 CVEs were published on March 24, 2023: 15 critical, 65 high. 2 are now in CISA KEV.
- Published
- 197
- Critical
- 15
- High
- 65
- Medium
- 72
- Low
- 2
- Unrated
- 43
- Now in CISA KEV
- 2
- Fix available
- 32
Most affected products
- Android
- 136
- tensorflow · tensorflow-cpu +1
- 14
- upx
- 7
- tensorflow · tensorflow-gpu +1
- 4
- Apache Software Foundation Apache OpenOffice
- 2
- dataease
- 2
- Google Android
- 2
- mlflow/mlflow · mlflow
- 2
- tensorflow · tensorflow-cpu
- 2
- assisted-installer · github.com/openshift/assisted-installer
- 1
Critical 15
- CVE-2023-28437SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypasseddataease
- CVE-2023-25668TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operationtensorflow · tensorflow-gpu +1
- CVE-2023-28444angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backendkyubisation angular-server-side-configuration · angular-ser…
- CVE-2022-47502Apache OpenOffice: Macro URL arbitrary script executionApache Software Foundation Apache OpenOffice
- CVE-2022-20532In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2022-28495TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via
- CVE-2022-42498In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2022-42499In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2022-42948Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components.
- CVE-2023-1177Path Traversal: '\..\filename' in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2023-20951In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-20954In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2023-21057In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-23149DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability.
- CVE-2023-26864SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via t
High 65
- CVE-2023-25660TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`tensorflow · tensorflow-cpu +1
- CVE-2023-25659TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitchtensorflow · tensorflow-cpu +1
- CVE-2023-25658TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGradtensorflow · tensorflow-cpu +1
- CVE-2023-25662TensorFlow vulnerable to integer overflow in EditDistancetensorflow · tensorflow-cpu +1
- CVE-2023-25663TensorFlow has Null Pointer Error in TensorArrayConcatV2tensorflow · tensorflow-cpu +1
- CVE-2023-25664TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad tensorflow · tensorflow-cpu
- CVE-2023-25666TensorFlow has Floating Point Exception in AudioSpectrogram tensorflow · tensorflow-cpu +1
- CVE-2023-25665TensorFlow has Null Pointer Error in SparseSparseMaximumtensorflow · tensorflow-cpu +1
- CVE-2023-25669TensorFlow has Floating Point Exception in AvgPoolGrad with XLAtensorflow · tensorflow-cpu +1
- CVE-2023-25670TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantizetensorflow · tensorflow-cpu +1
- CVE-2023-25671TensorFlow has segmentation fault in tfg-translate tensorflow · tensorflow-cpu
- CVE-2023-25672TensorFlow has Null Pointer Error in LookupTableImportV2tensorflow · tensorflow-gpu +1
- CVE-2023-25673TensorFlow has Floating Point Exception in TensorListSplit with XLA tensorflow · tensorflow-gpu +1
- CVE-2023-25674TensorFlow has Null Pointer Error in RandomShuffle with XLA enabletensorflow · tensorflow-cpu +1
- CVE-2023-25675TensorFlow has Segfault in Bincount with XLAtensorflow · tensorflow-gpu +1
- CVE-2023-25676TensorFlow has null dereference on ParallelConcat with XLAtensorflow · tensorflow-cpu +1
- CVE-2023-25801TensorFlow has double free in Fractional(Max/Avg)Pooltensorflow · tensorflow-cpu +1
- CVE-2023-27579TensorFlow has Floating Point Exception in TFLite in conv kerneltensorflow · tensorflow-cpu +1
- CVE-2023-28446Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralizationdenoland deno · deno_runtime +1
- CVE-2022-38745Apache OpenOffice: Empty entry in Java class pathApache Software Foundation Apache OpenOffice
- CVE-2021-3674A flaw was found in rizin.rizin
- CVE-2022-20542In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-20906In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK updateAndroid
- CVE-2023-20911In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustioAndroid
- CVE-2023-20917In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code.Android
- CVE-2023-20931In avdt_scb_hdl_write_req of avdt_scb_act.cc, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-20936In bta_av_rc_disc_done of bta_av_act.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-20947In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass.Android
- CVE-2023-20953In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being showAndroid
- CVE-2023-20955In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications foAndroid
- CVE-2023-20957In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy.Android
- CVE-2023-20958In read_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-20959In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks.Android
- CVE-2023-20960In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper inpuAndroid
- CVE-2023-20963In WorkSource, there is a possible parcel mismatch.Android
- CVE-2023-20964In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy.Android
- CVE-2023-20966In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-20971In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due tGoogle Android
- CVE-2023-20975In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW_CONTENT_CAPTURE due toAndroid
- CVE-2023-20976In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application Android
- CVE-2023-20993In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception.Android
- CVE-2023-21000In MediaCodec.cpp, there is a possible use after free due to improper locking.Android
- CVE-2023-21001In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due Android
- CVE-2023-21002In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission checAndroid
- CVE-2023-21003In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission checAndroid
- CVE-2023-21004In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission checAndroid
- CVE-2023-21005In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission checAndroid
- CVE-2023-21015In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission checAndroid
- CVE-2023-21017In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation.Android
- CVE-2023-21021In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network settingAndroid
- CVE-2023-21022In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption.Android
- CVE-2023-21024In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error.Android
- CVE-2023-21027In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code.Android
- CVE-2023-21028In parse_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator.Android
- CVE-2023-21030In Confirmation of keystore_cli_v2.cpp, there is a possible way to corrupt memory due to a double free.Android
- CVE-2023-21034In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass.Android
- CVE-2023-21035In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with theAndroid
- CVE-2023-21040In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code.Android
- CVE-2023-21041In append_to_params of param_util.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2023-21053In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21054In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code.Android
- CVE-2023-22812SanDisk PrivateAccess Deprecated TLS protocol versions supportedSanDisk PrivateAccess
- CVE-2023-25350Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection.
- CVE-2023-27042Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg.
- CVE-2023-27055Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request.
Medium, low and unrated 117
- CVE-2023-25667TensorFlow vulnerable to segfault when opening multiframe giftensorflow · tensorflow-cpu +1
- CVE-2023-28435Dataease file upload interface does not verify permission or file typedataease
- CVE-2023-28448Versionize is lacking bound checks, potentially leading to out of bounds memory accessfirecracker-microvm versionize · versionize
- CVE-2021-3844Rapid7 InsightVM Insufficient Session ExpirationRapid7 InsightVM
- CVE-2023-1616XiaoBingBy TeaCMS Article Title cross site scriptingXiaoBingBy TeaCMS
- CVE-2020-36691An issue was discovered in the Linux kernel before 5.8.
- CVE-2021-3684A vulnerability was found in OpenShift Assisted Installer.assisted-installer · github.com/openshift/assisted-installer
- CVE-2021-43311A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx
- CVE-2021-43312A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.upx
- CVE-2021-43313A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address.upx
- CVE-2021-43314A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx
- CVE-2021-43315A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx
- CVE-2021-43316A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le64().upx
- CVE-2021-43317A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get_le32().upx
- CVE-2022-20467In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy.Android
- CVE-2022-20499In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial Android
- CVE-2022-40208In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz atMoodle · moodle/moodle
- CVE-2022-42500In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation.Android
- CVE-2022-42528In ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code.Android
- CVE-2022-45597ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation.
- CVE-2023-1176Absolute Path Traversal in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2023-1583A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel.Linux kernel
- CVE-2023-20910In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion.Google Android
- CVE-2023-20926In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permissiAndroid
- CVE-2023-20929In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted bAndroid
- CVE-2023-20952In A2DP_BuildCodecHeaderSbc of a2dp_sbc.cc, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-20956In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-20962In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to Android
- CVE-2023-20968In multiple functions of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20969In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20970In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20972In btm_vendor_specific_evt of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20973In btm_create_conn_cancel_complete of btm_sec.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20974In btm_ble_add_resolving_list_entry_complete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20977In btm_ble_read_remote_features_complete of btm_ble_gap.cc, there is a possible out of bounds read due to improper input validation.Android
- CVE-2023-20979In GetNextSourceDataPacket of bta_av_co.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20980In btu_ble_ll_conn_param_upd_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20981In btu_ble_rc_param_req_evt of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20982In btm_read_tx_power_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20983In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20984In ParseBqrLinkQualityEvt of btif_bqr.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20985In BTA_GATTS_HandleValueIndication of bta_gatts_api.cc, there is a possible out of bounds write due to improper input validation.Android
- CVE-2023-20986In btm_ble_clear_resolving_list_completecomplete of btm_ble_privacy.cc, there is a possible out of bounds read due to a missing bounds checkAndroid
- CVE-2023-20987In btm_read_link_quality_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20988In btm_read_rssi_complete of btm_acl.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20989In btm_ble_write_adv_enable_complete of btm_ble_gap.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20990In btm_ble_rand_enc_complete of btm_ble.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20991In btm_ble_process_periodic_adv_sync_lost_evt of ble_scanner_hci_interface.cc , there is a possible out of bounds read due to a missing bounAndroid
- CVE-2023-20992In on_iso_link_quality_read of btm_iso_impl.h, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-20994In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2023-20995In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code.Android
- CVE-2023-20996In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation.Android
- CVE-2023-20997In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation.Android
- CVE-2023-20998In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation.Android
- CVE-2023-20999In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation.Android
- CVE-2023-21006In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21007In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21008In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21009In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21010In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21011In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21012In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21013In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21014In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21016In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device dAndroid
- CVE-2023-21018In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free.Android
- CVE-2023-21019In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21020In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free.Android
- CVE-2023-21025In ufdt_local_fixup_prop of ufdt_overlay.c, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21026In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to aAndroid
- CVE-2023-21029In register of UidObserverController.java, there is a missing permission check.Android
- CVE-2023-21031In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition.Android
- CVE-2023-21032In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow.Android
- CVE-2023-21033In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion.Android
- CVE-2023-21036In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kernAndroid
- CVE-2023-21038In cs40l2x_cp_trigger_queue_show of cs40l2x.c, there is a possible out of bounds write due to a use after free.Android
- CVE-2023-21039In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21042In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free.Android
- CVE-2023-21043In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free.Android
- CVE-2023-21044In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21045When cpif handles probe failures, there is a possible out of bounds read due to a use after free.Android
- CVE-2023-21046In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21047In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21048In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21049In append_camera_metadata of camera_metadata.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21050In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation.Android
- CVE-2023-21051In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2023-21052In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21055In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition.Android
- CVE-2023-21056In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion.Android
- CVE-2023-21058In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21059In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21060In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21061Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/AAndroid
- CVE-2023-21062In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21063In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check.Android
- CVE-2023-21064In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2023-21065In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2023-21067Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/AAndroid
- CVE-2023-21068In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user.Android
- CVE-2023-21069In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21070In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check.Android
- CVE-2023-21071In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation.Android
- CVE-2023-21072In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow.Android
- CVE-2023-21073In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow.Android
- CVE-2023-21075In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-21076In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-21077In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow.Android
- CVE-2023-21078In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow.Android
- CVE-2023-21079In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow.Android
- CVE-2023-24625Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) att
- CVE-2023-27242SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under
- CVE-2023-28150An issue was discovered in Independentsoft JODF before 1.1.110.
- CVE-2023-28151An issue was discovered in Independentsoft JSpreadsheet before 1.1.110.
- CVE-2023-28152An issue was discovered in Independentsoft JWord before 1.1.110.
- CVE-2023-28686Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message.
- CVE-2023-28818An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0.