CVEs published July 4, 2023
59 CVEs were published on July 4, 2023: 0 critical, 9 high.
- Published
- 59
- Critical
- 0
- High
- 9
- Medium
- 13
- Low
- 2
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- Qualcomm Snapdragon
- 18
- MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- 4
- MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- 2
- MediaTek MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT…
- 2
- MediaTek MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT…
- 2
- MediaTek MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT…
- 2
- ND Shortcodes
- 2
- SourceCodester Shopping Website
- 2
- Active It Zone Active eCommerce CMS
- 1
- CF7 Google Sheets Connector · cf7-google-sheets-connector-p…
- 1
High 9
- CVE-2023-28542Buffer Over-read in WLAN HOSTQualcomm Snapdragon
- CVE-2023-28541Buffer Over-read in WLAN HostQualcomm Snapdragon
- CVE-2023-24854Stack-based Buffer Overflow in WLAN HOSTQualcomm Snapdragon
- CVE-2023-24851Buffer Copy Without Checking Size of Input in WLAN HOSTQualcomm Snapdragon
- CVE-2023-22667Integer Overflow or Wraparound in AudioQualcomm Snapdragon
- CVE-2023-22387Use of Out-of-range Pointer Offset in Qualcomm IPCQualcomm Snapdragon
- CVE-2023-22386Buffer Copy Without Checking Size of Input in WLAN HOSTQualcomm Snapdragon
- CVE-2023-21672Use After Free in AudioQualcomm Snapdragon
- CVE-2023-21631Improper Input Validation in ModemQualcomm Snapdragon
Medium, low and unrated 50
- CVE-2023-31999All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users.npm @fastify/oauth2 · @fastify/oauth2
- CVE-2023-3506Active It Zone Active eCommerce CMS Create Ticket Page support_ticket cross site scriptingActive It Zone Active eCommerce CMS
- CVE-2023-3505Onest CRM Project List 2 cross site scriptingOnest CRM
- CVE-2023-3504SmartWeb Infotech Job Board My Profile Page account unrestricted uploadSmartWeb Infotech Job Board
- CVE-2023-3503SourceCodester Shopping Website insert-product.php unrestricted uploadSourceCodester Shopping Website
- CVE-2023-3502SourceCodester Shopping Website search-result.php sql injectionSourceCodester Shopping Website
- CVE-2023-2974Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolRed Hat build of Quarkus 2.13.8.Final · io.quarkus:quarkus-…
- CVE-2023-1273ND Shortcodes < 7.0 - Subscriber+ LFIND Shortcodes
- CVE-2023-2320CF7 Google Sheets Connector < 5.0.2 - Reflected XSSCF7 Google Sheets Connector · cf7-google-sheets-connector-p…
- CVE-2023-2321WPForms Google Sheet Connector < 3.4.6 - Reflected XSSWPForms Google Sheet Connector · gsheetconnector-wpforms-pro
- CVE-2023-3460Ultimate Member < 2.6.7 - Unauthenticated Privilege EscalationUltimate Member
- CVE-2022-4623ND Shortcodes < 7.0 - Contributor+ Stored XSS via ShortcodesND Shortcodes
- CVE-2023-3139Protect WP Admin < 4.0 - Unauthenticated Protection BypassProtect WP Admin
- CVE-2023-2010Forminator < 1.24.1 - Unauthenticated Race Condition on poll voteForminator
- CVE-2023-2324Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSSElementor Forms Google Sheet Connector · gsheetconnector-fo…
- CVE-2023-3133Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST APITutor LMS
- CVE-2023-2333Ninja Forms Google Sheet Connector < 1.2.7 - Reflected XSSNinja Forms Google Sheet Connector · gsheetconnector-ninja-…
- CVE-2023-21641Permissions, Privileges, and Access Controls in DisplayQualcomm Snapdragon
- CVE-2023-21640Buffer Copy Without Checking Size of Input in LinuxQualcomm Snapdragon
- CVE-2023-21639Buffer Copy Without Checking the Size of Input in AudioQualcomm Snapdragon
- CVE-2023-21638Incorrect Type Conversion or Cast in VideoQualcomm Snapdragon
- CVE-2023-21637Improper Restrictions of Operations within the Bounds of a Memory Buffer in LinuxQualcomm Snapdragon
- CVE-2023-21635Buffer Copy without Checking Size of Input in Data Network Stack & ConnectivityQualcomm Snapdragon
- CVE-2023-21633Improper Restriction of Operations within the Bounds of a Memory Buffer in LinuxQualcomm Snapdragon
- CVE-2023-21629Double Free in ModemQualcomm Snapdragon
- CVE-2023-21624Information Exposure in DSP ServicesQualcomm Snapdragon
- CVE-2023-20748In display, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8673, MT…
- CVE-2022-32666In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information.MediaTek MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT…
- CVE-2023-20693In wlan firmware, there is possible system crash due to an uncaught exception.MediaTek MT6739, MT6895, MT6983, MT8167, MT8168, MT8195, MT…
- CVE-2023-20692In wlan firmware, there is possible system crash due to an uncaught exception.MediaTek MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT…
- CVE-2023-20691In wlan firmware, there is possible system crash due to an integer overflow.MediaTek MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT…
- CVE-2023-20690In wlan firmware, there is possible system crash due to an integer overflow.MediaTek MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT…
- CVE-2023-20689In wlan firmware, there is possible system crash due to an integer overflow.MediaTek MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT…
- CVE-2023-20775In display, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6757, MT6757C, MT6757CD, MT6757CH, MT676…
- CVE-2023-20774In display, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6789, MT6835, MT6855, MT6886, MT6895, MT6983, MT…
- CVE-2023-20773In vow, there is a possible escalation of privilege due to a missing permission check.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- CVE-2023-20772In vow, there is a possible escalation of privilege due to a missing permission check.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- CVE-2023-20771In display, there is a possible memory corruption due to a race condition.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT…
- CVE-2023-20768In ion, there is a possible out of bounds read due to type confusion.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…
- CVE-2023-20767In pqframework, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8167, MT…
- CVE-2023-20766In gps, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6735, MT6739, MT6753, MT6757, MT6761, MT…
- CVE-2023-20761In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT…
- CVE-2023-20760In apu, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6879, MT6895, MT6983, MT8195
- CVE-2023-20759In cmdq, there is a possible memory corruption due to a missing bounds check.MediaTek MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT…
- CVE-2023-20758In cmdq, there is a possible memory corruption due to a missing bounds check.MediaTek MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT…
- CVE-2023-20757In cmdq, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6768, MT6771, MT6785, MT6833, MT6853, MT…
- CVE-2023-20756In keyinstall, there is a possible out of bounds write due to an integer overflow.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20753In rpmb, there is a possible out of bounds write due to a logic error.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20755In keyinstall, there is a possible out of bounds write due to an integer overflow.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20754In keyinstall, there is a possible out of bounds write due to an integer overflow.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…