CVEs published July 6, 2023
203 CVEs were published on July 6, 2023: 6 critical, 88 high. 1 is now in CISA KEV.
- Published
- 203
- Critical
- 6
- High
- 88
- Medium
- 47
- Low
- 1
- Unrated
- 61
- Now in CISA KEV
- 1
- Fix available
- 20
Most affected products
- Milesight UR32L
- 63
- Samsung Mobile Devices
- 31
- Huawei HarmonyOS · Huawei EMUI
- 25
- PiiGAB M-Bus SoftwarePack
- 9
- MilesightVPN
- 6
- mastodon
- 4
- Samsung Mobile Samsung Pass
- 3
- drogonframework/drogon
- 2
- langchain
- 2
- fossbilling/fossbilling
- 1
Critical 6
- CVE-2023-35987PiiGAB M-Bus Use of Hard-coded CredentialsPiiGAB M-Bus SoftwarePack
- CVE-2023-36460Mastodon vulnerable to arbitrary file creation through media attachmentsmastodon
- CVE-2023-36459Mastodon vulnerable to Cross-site Scripting through oEmbed preview cardsmastodon
- CVE-2023-23902A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-29824A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.scipy
- CVE-2023-34192Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted scr
High 88
- CVE-2023-35120PiiGAB M-Bus Cross-Site Request ForgeryPiiGAB M-Bus SoftwarePack
- CVE-2023-34433PiiGAB M-Bus Use of Password Hash With Insufficient Computational EffortPiiGAB M-Bus SoftwarePack
- CVE-2023-34995PiiGAB M-Bus Weak Password RequirementsPiiGAB M-Bus SoftwarePack
- CVE-2023-32652PiiGAB M-Bus Cross-site ScriptingPiiGAB M-Bus SoftwarePack
- CVE-2023-31277PiiGAB M-Bus Unprotected Transport of CredentialsPiiGAB M-Bus SoftwarePack
- CVE-2023-36859PiiGAB M-Bus Code InjectionPiiGAB M-Bus SoftwarePack
- CVE-2023-3531Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampassnilsteampassnet/teampass
- CVE-2023-36461Mastodon vulnerable to Denial of Service through slow HTTP responsesmastodon
- CVE-2023-36456Authentik lacks Proxy IP headers validationgoauthentik authentik
- CVE-2023-37260league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrasethephpleague oauth2-server · league/oauth2-server
- CVE-2023-36823Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element contentrgrove sanitize · sanitize
- CVE-2023-23550An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-23571An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22306An OS command injection vulnerability exists in the libzebra.so bridge_group functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22659An os command injection vulnerability exists in the libzebra.so change_hostname functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22844An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-22319A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-23907A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-22371An os command injection vulnerability exists in the liburvpn.so create_private_key functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-24520Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24519Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24583Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24582Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22365An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22299An OS command injection vulnerability exists in the vtysh_ubus _get_fw_logs functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24595An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-22653An OS command injection vulnerability exists in the vtysh_ubus tcpdump_start_cb functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24018A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of Milesight UR32L v32.3Milesight UR32L
- CVE-2023-25124Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25123Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25122Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25121Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25120Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25119Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25118Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25117Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25116Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25115Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25114Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25113Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25112Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25111Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25110Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25109Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25108Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25107Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25106Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25105Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25104Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25103Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25102Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25101Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25100Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25099Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25098Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25097Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25096Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25095Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25094Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25093Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25092Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25091Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25090Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25089Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25088Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25087Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25086Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25085Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25084Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25083Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25082Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-25081Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of an unsafe sprintf patMilesight UR32L
- CVE-2023-24019A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-25583Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-25582Two OS command injection vulnerabilities exist in the zebra vlan_name functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-26137All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input is used to build headdrogonframework/drogon
- CVE-2023-30664Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged actiSamsung Mobile Devices
- CVE-2023-30658Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activitieSamsung Mobile Devices
- CVE-2023-30656Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2023-30655Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activitieSamsung Mobile Devices
- CVE-2023-30649Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2023-30647Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrarSamsung Mobile Devices
- CVE-2023-30646Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary coSamsung Mobile Devices
- CVE-2023-30645Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary coSamsung Mobile Devices
- CVE-2023-30644Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.Samsung Mobile Devices
- CVE-2023-30643Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to delete arbitrary nonSamsung Mobile Devices
- CVE-2023-30195In the module "Detailed Order" (lgdetailedorder) in version up to 1.1.20 from Linea Grafica for PrestaShop, a guest can download personal in
- CVE-2023-36189SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain clangchain
Medium, low and unrated 109
- CVE-2023-35765PiiGAB M-Bus Plaintext Storage of a PasswordPiiGAB M-Bus SoftwarePack
- CVE-2023-33868PiiGAB M-Bus Improper Restriction of Excessive Authentication AttemptsPiiGAB M-Bus SoftwarePack
- CVE-2023-20899VMware SD-WAN (Edge) contains a bypass authentication vulnerability.VMware SD-WAN
- CVE-2023-36829Sentry CORS misconfiguration vulnerabilitygetsentry sentry · sentry
- CVE-2023-35934yt-dlp File Downloader cookie leakyt-dlp
- CVE-2023-36462Mastodon's verified profile links can be formatted in a misleading waymastodon
- CVE-2023-3529Rotem Dynamics Rotem CRM OTP URI Interface information exposureRotem Dynamics Rotem CRM
- CVE-2023-3528ThinuTech ThinuCMS category.php sql injectionThinuTech ThinuCMS
- CVE-2023-1298ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the SeServiceNow Now User Experience
- CVE-2023-36830SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.sqlfluff
- CVE-2023-23547A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-24497Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-24496Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN v2.0.2.MilesightVPN
- CVE-2023-23546A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5.Milesight UR32L
- CVE-2023-35948Novu Open Redirect Vulnerability in Sign-In with GitHub Functionalitynovuhq novu
- CVE-2023-35937Metersphere missing permission checkmetersphere
- CVE-2022-48520Unauthorized access vulnerability in the SystemUI module.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48519Unauthorized access vulnerability in the SystemUI module.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48518Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-1695Vulnerability of failures to capture exceptions in the communication framework.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-1691Vulnerability of failures to capture exceptions in the communication framework.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48517Unauthorized service access vulnerability in the DSoftBus module.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48516Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48515Vulnerability of inappropriate permission control in Nearby.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48514The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confHuawei HarmonyOS
- CVE-2022-48513Vulnerability of identity verification being bypassed in the Gallery module.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-46892Encryption bypass vulnerability in Maintenance mode.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48511Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48510Input verification vulnerability in the AMS module.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48509Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48507Vulnerability of identity verification being bypassed in the storage module.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-34164Vulnerability of incomplete input parameter verification in the communication framework module.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-3456Vulnerability of kernel raw address leakage in the hang detector module.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37245Buffer overflow vulnerability in the modem pinctrl module.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37242Vulnerability of commands from the modem being intercepted in the atcmdserver module.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37241Input verification vulnerability in the WMS API.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37240 Vulnerability of missing input length verification in the distributed file system.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37239Format string vulnerability in the distributed file system.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-37238Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.Huawei HarmonyOS · Huawei EMUI
- CVE-2021-46894Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalatioHuawei HarmonyOS · Huawei EMUI
- CVE-2022-48512Use After Free (UAF) vulnerability in the Vdecoderservice service.Huawei HarmonyOS · Huawei EMUI
- CVE-2022-48508 Inappropriate authorization vulnerability in the system apps.Huawei HarmonyOS · Huawei EMUI
- CVE-2023-3523Out-of-bounds Read in gpac/gpacgpac/gpac
- CVE-2023-26138All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headersdrogonframework/drogon
- CVE-2023-30678Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitSamsung Mobile Calendar
- CVE-2023-30677Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on Samsung Mobile Samsung Pass
- CVE-2023-30676Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass.Samsung Mobile Samsung Pass
- CVE-2023-30675Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung WaSamsung Mobile Samsung Pass
- CVE-2023-30674Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.Samsung Mobile Samsung Internet
- CVE-2023-30673Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrSamsung Mobile Smart Switch PC
- CVE-2023-30672Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 allows attackers to cSamsung Mobile Samsung Smart Switch
- CVE-2023-30671Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade installed applicatioSamsung Mobile Devices
- CVE-2023-30670Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitraSamsung Mobile Devices
- CVE-2023-30669Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbiSamsung Mobile Devices
- CVE-2023-30668Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker to execute arbitrarSamsung Mobile Devices
- CVE-2023-30667Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with system privilege.Samsung Mobile Devices
- CVE-2023-30666Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cauSamsung Mobile Devices
- CVE-2023-30665Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause anSamsung Mobile Devices
- CVE-2023-30663Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers toSamsung Mobile Devices
- CVE-2023-30662Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackerSamsung Mobile Devices
- CVE-2023-30661Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local attackSamsung Mobile Devices
- CVE-2023-30660Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Release 1 allows local atSamsung Mobile Devices
- CVE-2023-30659Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activitieSamsung Mobile Devices
- CVE-2023-30657Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attackers to launch privilSamsung Mobile Devices
- CVE-2023-30653Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arSamsung Mobile Devices
- CVE-2023-30652Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to executSamsung Mobile Devices
- CVE-2023-30651Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arSamsung Mobile Devices
- CVE-2023-30650Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbiSamsung Mobile Devices
- CVE-2023-30648Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the Samsung Mobile Devices
- CVE-2023-30642Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilegSamsung Mobile Devices
- CVE-2023-30641Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile toSamsung Mobile Devices
- CVE-2023-30640Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugratioSamsung Mobile Devices
- CVE-2023-3521Cross-site Scripting (XSS) - Reflected in fossbilling/fossbillingfossbilling/fossbilling
- CVE-2023-3520Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpitit-novum/openitcockpit
- CVE-2020-21861File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.
- CVE-2020-21862Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.
- CVE-2020-22336An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
- CVE-2021-46896Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
- CVE-2022-46080Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET.
- CVE-2023-24256An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal
- CVE-2023-27225A cross-site scripting (XSS) vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to e
- CVE-2023-29381An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive information v
- CVE-2023-29382An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.
- CVE-2023-29656An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and low-privilege users to
- CVE-2023-30319Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad59f8
- CVE-2023-30320Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad59f
- CVE-2023-30321Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5
- CVE-2023-30322Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers t
- CVE-2023-30323SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu ChatEngine v.1.0, allows attackers to gain sensit
- CVE-2023-30325SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine v.1.0, allows attackers to gai
- CVE-2023-30326Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp in wliang6 ChatEngine commit fded8e710ad59
- CVE-2023-34193File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive inform
- CVE-2023-36188An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.langchain
- CVE-2023-36968A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL
- CVE-2023-36969CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.
- CVE-2023-36970A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the
- CVE-2023-36995TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cooki
- CVE-2023-37122A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2023-37124A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts
- CVE-2023-37125A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrar
- CVE-2023-37131A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily chan
- CVE-2023-37132A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web
- CVE-2023-37133A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary we
- CVE-2023-37134A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary we
- CVE-2023-37135A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scr
- CVE-2023-37136A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbi
- CVE-2023-37192Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, p
- CVE-2023-37453An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2.
- CVE-2023-37454An issue was discovered in the Linux kernel through 6.4.2.