CVEs published July 12, 2023
237 CVEs were published on July 12, 2023: 4 critical, 34 high. 2 are now in CISA KEV.
- Published
- 237
- Critical
- 4
- High
- 34
- Medium
- 66
- Low
- 11
- Unrated
- 122
- Now in CISA KEV
- 2
- Fix available
- 45
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 59
- Google Android
- 26
- Adobe InDesign
- 12
- JetBrains TeamCity
- 7
- Apache Software Foundation Apache Airflow · apache-airflow
- 5
- Adobe Media Encoder
- 4
- Jenkins Project Jenkins mabl Plugin · com.mabl.integration.…
- 4
- Schneider Electric StruxureWare Data Center Expert
- 4
- Adobe ColdFusion
- 3
- Apache Software Foundation Apache Ambari · org.apache.ambar…
- 2
Critical 4
- CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionAdobe ColdFusion
- CVE-2023-3595Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code ExecutionRockwell Automation 1756-EN2T Series A, B, C · Rockwell… +20
- CVE-2023-37582Apache RocketMQ: Possible remote code execution when using the update configuration functionApache Software Foundation Apache RocketMQ · org.apache.roc…
- CVE-2023-30429Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar ProxyApache Software Foundation Apache Pulsar · org.apache.pulsa…
High 34
- CVE-2023-21245In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during deviGoogle Android
- CVE-2023-3643Boss Mini document file inclusionBoss Mini
- CVE-2023-29308[FG-VD-23-009] Adobe InDesign 2023 Arbitrary Code Execution Vulnerability NotificationAdobe InDesign
- CVE-2023-29301Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypassAdobe ColdFusion
- CVE-2023-29298Adobe ColdFusion Improper Access Control Security feature bypassAdobe ColdFusion
- CVE-2023-20185A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow aCisco NX-OS System Software in ACI Mode
- CVE-2023-3596Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service Rockwell Automation 1756-EN4TR Series A · Rockwell Autom… +1
- CVE-2021-43757Adobe Media Encoder 3GP File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Media Encoder
- CVE-2022-45855Apache Ambari: Allows authenticated metrics consumers to perform RCEApache Software Foundation Apache Ambari · org.apache.ambar…
- CVE-2022-42009Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.Apache Software Foundation Apache Ambari · org.apache.ambar…
- CVE-2023-30428Apache Pulsar Broker: Incorrect Authorization Validation for Rest ProducerApache Software Foundation Apache Pulsar Broker · org.apach…
- CVE-2023-37579Apache Pulsar Function Worker: Incorrect Authorization for Function Worker Can Leak Sink/Source CredentialsApache Software Foundation Apache Pulsar Function Worker ·…
- CVE-2023-29414 A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalaSchneider Electric Accutech Manager
- CVE-2023-32200Apache Jena: Exposure of execution in script engine expressions.Apache Software Foundation Apache Jena · org.apache.jena:je…
- CVE-2023-2763Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023Dassault Systèmes SOLIDWORKS Desktop
- CVE-2023-2762Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023Dassault Systèmes SOLIDWORKS Desktop
- CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that coSchneider Electric StruxureWare Data Center Expert
- CVE-2023-37196 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that coulSchneider Electric StruxureWare Data Center Expert
- CVE-2023-3087FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subjecttechjewel FluentSMTP – WP SMTP Plugin with Amazon SES, Send…
- CVE-2023-3081WP Mail Logging <= 1.11.1 - Unauthenticated Stored Cross-Site Scripting via Emailsmub WP Mail Logging
- CVE-2023-3166Lana Email Logger <= 1.0.2 - Unauthenticated Stored Cross-Site Scripting via Email Subjectlanacodes Lana Email Logger
- CVE-2023-3167Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subjectwdm-team Mail Queue
- CVE-2023-3023WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'levelfourstorefront Shopping Cart & eCommerce Store
- CVE-2023-3092SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subjectphotoboxone SMTP Mail
- CVE-2023-3088WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Emailwpvibes WP Mail Log
- CVE-2023-3158Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subjectrahalaboulfeth Mail Control – Email Customizer, SMTP Delive…
- CVE-2023-3082Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Emailsaadiqbal Post SMTP – Complete Email Deliverability and SMT…
- CVE-2023-3093YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Emailyaycommerce YaySMTP and Email Logs: Amazon SES, SendGrid, O…
- CVE-2023-3168WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subjectmsh134 WP Reroute Email
- CVE-2023-3135Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subjectoacstudio Mailtree Log Mail
- CVE-2023-3525The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' wanderlustcodes Getnet Argentina para Woocommerce
- CVE-2023-3105LearnDash LMS <= 4.6.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password ChangeStellarWP LearnDash LMS
- CVE-2023-3080WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subjectwardee Mail logging – WP Mail Catcher
- CVE-2023-3122GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Emailgdragon GD Mail Queue
Medium, low and unrated 199
- CVE-2023-35694In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-35693In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2023-35691there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-21400In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking.Google Android
- CVE-2023-21399there is a possible way to bypass cryptographic assurances due to a logic error in the code.Google Android
- CVE-2023-21262In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a rGoogle Android
- CVE-2023-21257In updateSettingsInternalLI of InstallPackageHelper.java, there is a possible way to sideload an app in the work profile due to a missing peGoogle Android
- CVE-2023-21256In SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities via Settings due to a logic error in the code.Google Android
- CVE-2023-21255In multiple functions of binder.c, there is a possible memory corruption due to a use after free.Google Android
- CVE-2023-21254In getCurrentState of OneTimePermissionUserManager.java, there is a possible way to hold one-time permissions after the app is being killed Google Android
- CVE-2023-21251In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation.Google Android
- CVE-2023-21250In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-21249In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass.Google Android
- CVE-2023-21248In getAvailabilityStatus of WifiScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restriction dGoogle Android
- CVE-2023-21247In getAvailabilityStatus of BluetoothScanningMainSwitchPreferenceController.java, there is a possible way to bypass a device policy restrictGoogle Android
- CVE-2023-21246In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exceptioGoogle Android
- CVE-2023-21243In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file with no limits due Google Android
- CVE-2023-21241In rw_i93_send_to_upper of rw_i93.cc, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-21240In Policy of Policy.java, there is a possible boot loop due to resource exhaustion.Google Android
- CVE-2023-21239In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy.Google Android
- CVE-2023-21238In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy.Google Android
- CVE-2023-21145In updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background launch restrictions due to a logic error in tGoogle Android
- CVE-2023-20942In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a Google Android
- CVE-2023-20918In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no additionGoogle Android
- CVE-2023-34123Use of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics.SonicWall GMS · SonicWall Analytics
- CVE-2021-0948The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space.Google Android
- CVE-2023-3635Okio GzipSource unhandled exception Denial of Servicecom.squareup.okio:okio · com.squareup.okio:okio-jvm
- CVE-2023-3644SourceCodester Service Provider Management System sql injectionSourceCodester Service Provider Management System
- CVE-2023-3642GZ Scripts Vacation Rental Website HTTP POST Request cross site scriptingGZ Scripts Vacation Rental Website
- CVE-2023-3641khodakhah NodCMS POST Request blog-comment-4 cross site scriptingkhodakhah NodCMS
- CVE-2023-38046PAN-OS: Read System Files and Resources During Configuration CommitPalo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW +1
- CVE-2023-29311[FG-VD-23-006] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IV NotificationAdobe InDesign
- CVE-2023-29314[FG-VD-23-013] Adobe InDesign 2023 Out-of-Bound Read Vulnerability X NotificationAdobe InDesign
- CVE-2023-29312[FG-VD-23-004] Adobe InDesign 2023 Out-of-Bound Read Vulnerability II NotificationAdobe InDesign
- CVE-2023-29318[FG-VD-23-011] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VIII NotificationAdobe InDesign
- CVE-2023-29309[FG-VD-23-003] Adobe InDesign 2023 Out-of-Bound Read Vulnerability NotificationAdobe InDesign
- CVE-2023-29317[FG-VD-23-005] Adobe InDesign 2023 Out-of-Bound Read Vulnerability III NotificationAdobe InDesign
- CVE-2023-29316[FG-VD-23-012] Adobe InDesign 2023 Out-of-Bound Read Vulnerability IX NotificationAdobe InDesign
- CVE-2023-29313[FG-VD-23-014] Adobe InDesign 2023 Out-of-Bound Read Vulnerability XI NotificationAdobe InDesign
- CVE-2023-29315[FG-VD-23-008] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VI NotificationAdobe InDesign
- CVE-2023-29319[FG-VD-23-010] Adobe InDesign 2023 Out-of-Bound Read Vulnerability VII NotificationAdobe InDesign
- CVE-2023-29310[FG-VD-23-007] Adobe InDesign 2023 Out-of-Bound Read Vulnerability V NotificationAdobe InDesign
- CVE-2023-37965A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an Jenkins Project Jenkins ElasticBox CI Plugin · org.jenkins-…
- CVE-2023-37964A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to connect to an attackJenkins Project Jenkins ElasticBox CI Plugin · org.jenkins-…
- CVE-2023-37963A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect Jenkins Project Jenkins Benchmark Evaluator Plugin · io.jen…
- CVE-2023-37962A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers to connect to an Jenkins Project Jenkins Benchmark Evaluator Plugin · io.jen…
- CVE-2023-37961A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into loggJenkins Project Jenkins Assembla Auth Plugin · org.jenkins-…
- CVE-2023-37960Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files froJenkins Project Jenkins MathWorks Polyspace Plugin · com.ma…
- CVE-2023-37959A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect Jenkins Project Jenkins Sumologic Publisher Plugin · org.je…
- CVE-2023-37958A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an Jenkins Project Jenkins Sumologic Publisher Plugin · org.je…
- CVE-2023-37957A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attackers to connect to an Jenkins Project Jenkins Pipeline restFul API Plugin · io.je…
- CVE-2023-37956A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to conJenkins Project Jenkins Test Results Aggregator Plugin · or…
- CVE-2023-37955A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect tJenkins Project Jenkins Test Results Aggregator Plugin · or…
- CVE-2023-37954A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a Jenkins Project Jenkins Rebuilder Plugin · com.sonyericsson…
- CVE-2023-37953A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attackerJenkins Project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2023-37952A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-speciJenkins Project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2023-37951Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure pJenkins Project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2023-37950A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials Jenkins Project Jenkins mabl Plugin · com.mabl.integration.…
- CVE-2023-37949A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect toJenkins Project Jenkins Orka by MacStadium Plugin · io.jenk…
- CVE-2023-37948Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling mJenkins Project Jenkins Oracle Cloud Infrastructure Compute…
- CVE-2023-37947Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pJenkins Project Jenkins OpenShift Login Plugin · org.opensh…
- CVE-2023-37946Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login.Jenkins Project Jenkins OpenShift Login Plugin · org.opensh…
- CVE-2023-37945A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/ReaJenkins Project Jenkins SAML Single Sign On(SSO) Plugin · i…
- CVE-2023-37944A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attackJenkins Project Jenkins Datadog Plugin · org.datadog.jenkin…
- CVE-2023-37943Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test toJenkins Project Jenkins Active Directory Plugin · org.jenki…
- CVE-2023-37942Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (Jenkins Project Jenkins External Monitor Job Type Plugin ·…
- CVE-2023-3618Segmentation fault in fax3encode in libtiff/tif_fax3.clibtiff · Red Hat Enterprise Linux +1
- CVE-2023-20210A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected devicCisco BroadWorks
- CVE-2023-20207A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive iCisco Duo Authentication Proxy
- CVE-2023-37456The session restore helper crashed whenever there was no parameter sent to the message handler.Mozilla Firefox for iOS
- CVE-2023-37455The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab.Mozilla Firefox for iOS
- CVE-2023-3600Use-after-free in workersMozilla Firefox · Mozilla Thunderbird
- CVE-2023-38069In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain casesJetBrains IntelliJ IDEA
- CVE-2023-38068In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk formsJetBrains YouTrack
- CVE-2023-38067In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent logJetBrains TeamCity
- CVE-2023-38066In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloadsJetBrains TeamCity
- CVE-2023-38065In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possibleJetBrains TeamCity
- CVE-2023-38064In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent logJetBrains TeamCity
- CVE-2023-38063In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possibleJetBrains TeamCity
- CVE-2023-38062In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurationsJetBrains TeamCity
- CVE-2023-38061In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possibleJetBrains TeamCity
- CVE-2021-44696Adobe Prelude JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Prelude
- CVE-2021-43759Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-43758Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-43760Adobe Media Encoder MOV File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2023-22888Apache Airflow: Scheduler remote DoSApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-36543Apache Airflow: ReDoS via dags functionApache Software Foundation Apache Airflow · apache-airflow
- CVE-2022-46651Apache Airflow: Security vulnerability on AirFlow ConnectionsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-22887Apache Airflow path traversal by authenticated userApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-35908Apache Airflow: Access to DAGs without relevant permissionApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-31007Apache Pulsar: Broker does not always disconnect client when authentication data expiresApache Software Foundation Apache Pulsar · org.apache.pulsa…
- CVE-2022-48451In bluetooth service, there is a possible out of bounds write due to race condition.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33905In iwnpi server, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33904In hci_server, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48450In bluetooth service, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33903In FM service, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33902In bluetooth service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33901In bluetooth service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33897In libimpl-ril, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33896In libimpl-ril, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33895In fastDial service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33894In fastDial service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33893In fastDial service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33892In fastDial service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33891In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33890In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33889In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33888In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33887In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33886In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33885In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33884In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33883In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33882In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33881In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33880In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33879In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-32789In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-32788In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33900In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33899In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-33898In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30913In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30942In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30941In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30940In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30939In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30938In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30937In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30936In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30935In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30934In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30933In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30932In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30931In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30930In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30929In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30928In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30927In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30926In opm service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30925In opm service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30924In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30923In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30922In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30921In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30920In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30919In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30918In telephony service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30917In DMService, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-30916In DMService, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-3106Kernel: netlink socket crash (null pointer deref) in netlink_dump functionRed Hat Enterprise Linux
- CVE-2021-4427Vuukle Comments, Reactions, Share Bar, Revenue <= 3.4.31 - Cross-Site Request Forgery BypassVuukle Comments, Reactions, Share Bar, Revenue
- CVE-2020-36761Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypassajay WebberZone Top 10 — Popular Posts
- CVE-2021-4426Absolute Reviews <= 1.0.8 - Cross-Site Request Forgery Bypasscodesupplyco Absolute Reviews
- CVE-2020-36760Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypassoceanwp Ocean Extra
- CVE-2021-4425Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypasswpmudev Defender Security – Malware Scanner, Login Security…
- CVE-2023-37200 A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replaciSchneider Electric EcoStruxure OPC UA Server Expert
- CVE-2023-37199 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admSchneider Electric StruxureWare Data Center Expert
- CVE-2021-4424Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypassquantumcloud Slider Hero with Video Background, Animation
- CVE-2021-4423RAYS Grid <= 1.2.2 - Cross-Site Request Forgery Bypassit-rays RAYS Grid
- CVE-2021-4422POST SMTP Mailer <= 2.0.20 - Cross-Site Request Forgery Bypasssaadiqbal Post SMTP – Complete Email Deliverability and SMT…
- CVE-2020-36757WP Hotel Booking <= 1.10.1 - Cross-Site Request Forgery Bypassthimpress WP Hotel Booking
- CVE-2021-4421Advanced Popups <= 1.1.1 - Cross-Site Request Forgery Bypasscodesupplyco Advanced Popups
- CVE-2020-3675610WebAnalytics <= 1.2.8 - Cross-Site Request Forgery Bypass10WebAnalytics
- CVE-2021-4420Sell Media <= 2.5.5 - Cross-Site Request Forgery Bypassendortrails Sell Media
- CVE-2021-4419WP-Backgrounds Lite <= 2.3 - Cross-Site Request Forgery Bypassinoplugs WP-Backgrounds Lite
- CVE-2023-37198 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when anSchneider Electric StruxureWare Data Center Expert
- CVE-2023-2561Gallery Metabox <= 1.5 - Missing Authorization via gallery_removebillerickson Gallery Metabox
- CVE-2023-3202MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Updateinspireui MStore API – Create Native Android & iOS Apps On…
- CVE-2020-36752Coming Soon & Maintenance Mode Page <= 1.57 - Cross-Site Request Forgery Bypasshookandhook Coming Soon & Maintenance Mode Page & Under Con…
- CVE-2023-2517Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setuproxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…
- CVE-2023-2869WP-Members Membership <= 3.4.7.3 - Missing Authorization to Settings Updatecbutlerjr WP-Members Membership Plugin
- CVE-2023-3369About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scriptingd3wp About Me 3000 widget
- CVE-2023-3199MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Updateinspireui MStore API – Create Native Android & iOS Apps On…
- CVE-2023-2562Gallery Metabox <= 1.5 - Missing Authorization via refresh_metaboxbillerickson Gallery Metabox
- CVE-2023-3011ARMember <= 4.0.5 - Cross-Site Request Forgeryreputeinfosystems ARMember – Membership Plugin, Content Res…
- CVE-2021-4417Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypasswpmudev Forminator Forms – Contact Form, Payment Form & Cus…
- CVE-2021-4416wp-mpdf <= 3.5.1 - Cross-Site Request Forgery Bypassfkrauthan wp-mpdf
- CVE-2021-4415Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypasssunshinephotocart Sunshine Photo Cart – Client Photo Galler…
- CVE-2021-4414Abandoned Cart Lite for WooCommerce <= 5.8.5 - Cross-Site Request Forgery Bypasstychesoftwares Abandoned Cart Lite for WooCommerce
- CVE-2021-4413Process Steps Template Designer <= 1.2.1 - Cross-Site Request Forgery Bypassnarinder-singh Process Steps Template Designer
- CVE-2021-4412WP Prayer <= 1.6.5 - Cross-Site Request Forgery Bypassabrg WP Prayer
- CVE-2021-4411WP EasyPay – Square for WordPress <= 3.2.0 - Cross-Site Request Forgery Bypasssaadiqbal WP Easy Pay – Payment and Donation form Builder f…
- CVE-2021-4410Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery Bypasscarlos_a_sanz Qtranslate Slug
- CVE-2021-4409WooCommerce Etsy Integration <= 3.3.1 - Cross-Site Request Forgery Bypasspurpleturtlepro Etsy Integration For WooCommerce
- CVE-2021-4408DW Question & Answer <= 1.5.8 - Cross-Site Request Forgery Bypassdesignwall DW Question & Answer
- CVE-2021-4407Custom Banners <= 3.2.2 - Cross-Site Request Forgery Bypassghuger Custom Banners
- CVE-2020-36750EWWW Image Optimizer <= 5.8.1 - Cross-Site Request Forgery Bypassnosilver4u EWWW Image Optimizer
- CVE-2020-20021An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon
- CVE-2023-26563The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal.
- CVE-2023-26564The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal.
- CVE-2023-30226An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of ser
- CVE-2023-33274The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly access C
- CVE-2023-33668DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers
- CVE-2023-36266An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Browser Extensions versio
- CVE-2023-37627Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection.
- CVE-2023-37628Online Piggery Management System 1.0 is vulnerable to SQL Injection.
- CVE-2023-37629Online Piggery Management System 1.0 is vulnerable to File Upload.
- CVE-2023-37630Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS).