# CVEs published 2023-09-04

152 CVEs were published on September 4, 2023: 2 critical, 31 high. Days are UTC.

- [CVE-2023-32338](https://cve.now/CVE-2023-32338.md): IBM Sterling Secure Proxy information disclosure (CVSS 5.1, IBM Sterling Secure Proxy)
- [CVE-2022-43903](https://cve.now/CVE-2022-43903.md): IBM Security Guardium denial of service (CVSS 4.3, IBM Security Guardium)
- [CVE-2023-35892](https://cve.now/CVE-2023-35892.md): IBM Financial Transaction Manager for SWIFT Services XML external entity injection (CVSS 7.1, IBM Financial Transaction Manager for SWIFT Services)
- [CVE-2023-41058](https://cve.now/CVE-2023-41058.md): Trigger \`beforeFind\` not invoked in internal query pipeline in parse-server (CVSS 7.5, parse-community parse-server · parse-server)
- [CVE-2023-40015](https://cve.now/CVE-2023-40015.md): Vyper: reversed order of side effects for some operations (CVSS 3.7, vyperlang vyper · vyper)
- [CVE-2023-41052](https://cve.now/CVE-2023-41052.md): Vyper: incorrect order of evaluation of side effects for some builtins (CVSS 3.7, vyperlang vyper · vyper)
- [CVE-2023-41055](https://cve.now/CVE-2023-41055.md): LibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia\_language cookie (CVSS 7.5, Ahwxorg LibreY)
- [CVE-2023-41054](https://cve.now/CVE-2023-41054.md): LibreY Server-Side Request Forgery (SSRF) vulnerability in image\_proxy.php (CVSS 8.2, Ahwxorg LibreY)
- [CVE-2023-41057](https://cve.now/CVE-2023-41057.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it (CVSS 5.5, plannigan hyper-bump-it · hyper-bump-it)
- [CVE-2023-4758](https://cve.now/CVE-2023-4758.md): Buffer Over-read in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-28072](https://cve.now/CVE-2023-28072.md): Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. (CVSS 7.8, Dell Alienware Command Center)
- [CVE-2023-4733](https://cve.now/CVE-2023-4733.md): Use After Free in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2023-4750](https://cve.now/CVE-2023-4750.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-4752](https://cve.now/CVE-2023-4752.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-4755](https://cve.now/CVE-2023-4755.md): Use After Free in gpac/gpac (CVSS 5.3, gpac/gpac)
- [CVE-2023-3222](https://cve.now/CVE-2023-3222.md): Vulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin (CVSS 7.5, AlfnRU Password Recovery Plugin)
- [CVE-2023-3221](https://cve.now/CVE-2023-3221.md): User enumeration vulnerability in Roundcube Password Recovery Plugin (CVSS 5.3, AlfnRU Password Recovery Plugin)
- [CVE-2023-32102](https://cve.now/CVE-2023-32102.md): WordPress Library Viewer Plugin \<= 2.0.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Pexle Chris Library Viewer)
- [CVE-2023-32578](https://cve.now/CVE-2023-32578.md): WordPress Column-Matic Plugin \<= 1.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Twinpictures Column-Matic)
- [CVE-2023-40197](https://cve.now/CVE-2023-40197.md): WordPress flowpaper Plugin \<= 1.9.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Devaldi flowpaper)
- [CVE-2023-4298](https://cve.now/CVE-2023-4298.md): 123.chat \< 1.3.1 - Admin+ Stored XSS (CVSS 4.8, 123.chat)
- [CVE-2023-4279](https://cve.now/CVE-2023-4279.md): User Activity Log \< 1.6.7 - IP Spoofing (CVSS 7.5, User Activity Log)
- [CVE-2023-4216](https://cve.now/CVE-2023-4216.md): Orders Tracking for WooCommerce \< 1.2.6 - Admin+ Arbitrary File Access/Read (CVSS 2.7, Orders Tracking for WooCommerce)
- [CVE-2023-4019](https://cve.now/CVE-2023-4019.md): Media from FTP \< 11.17 - Author+ Arbitrary File Access (CVSS 8.8, Media from FTP)
- [CVE-2023-3814](https://cve.now/CVE-2023-3814.md): Advanced File Manager \< 5.1.1 - Admin+ Arbitrary File/Folder Access (CVSS 4.9, Advanced File Manager)
- [CVE-2023-3499](https://cve.now/CVE-2023-3499.md): Robo Gallery \< 3.2.16 - Admin+ Stored XSS (CVSS 4.8, Photo Gallery, Images, Slider in Rbs Image Gallery)
- [CVE-2023-2813](https://cve.now/CVE-2023-2813.md): Multiple Themes - Reflected XSS (no CVSS, Aapna · Anand +44)
- [CVE-2023-4284](https://cve.now/CVE-2023-4284.md): Post Timeline \< 2.2.6 - Reflected XSS (no CVSS, Post Timeline)
- [CVE-2023-4151](https://cve.now/CVE-2023-4151.md): Store Locator WordPress \< 1.4.13 - Reflected XSS (CVSS 6.1, Store Locator WordPress)
- [CVE-2023-4253](https://cve.now/CVE-2023-4253.md): Chatbot \< 4.7.8 - Admin+ Stored XSS in FAQ Builder (CVSS 4.8, AI ChatBot)
- [CVE-2023-4254](https://cve.now/CVE-2023-4254.md): Chatbot \< 4.7.8 - Admin+ Stored XSS in Language Settings (CVSS 4.8, AI ChatBot)
- [CVE-2023-4269](https://cve.now/CVE-2023-4269.md): User Activity Log \< 1.6.6 - Subscriber+ Log Export (CVSS 4.3, User Activity Log)
- [CVE-2023-4059](https://cve.now/CVE-2023-4059.md): Profile Builder \< 3.9.8 - Unauthenticated Plugin's Pages Creation (CVSS 4.3, Profile Builder)
- [CVE-2023-4587](https://cve.now/CVE-2023-4587.md): Insecure direct object reference in ZKTeco ZEM800 (CVSS 8.3, ZKTeco ZEM800)
- [CVE-2023-40214](https://cve.now/CVE-2023-40214.md): WordPress Business Pro Theme \<= 1.10.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Vathemes Business Pro)
- [CVE-2023-40196](https://cve.now/CVE-2023-40196.md): WordPress ImageRecycle pdf & image compression Plugin \<= 3.1.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ImageRecycle pdf & image compression)
- [CVE-2023-32296](https://cve.now/CVE-2023-32296.md): WordPress Kangu para WooCommerce Plugin \<= 2.2.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Kangu para WooCommerce)
- [CVE-2023-30485](https://cve.now/CVE-2023-30485.md): WordPress Avartan Slider Lite Plugin \<= 1.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Solwin Infotech Responsive WordPress Slider – Avartan Slide…)
- [CVE-2023-40205](https://cve.now/CVE-2023-40205.md): WordPress PixTypes Plugin \<= 1.4.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Pixelgrade PixTypes)
- [CVE-2023-40206](https://cve.now/CVE-2023-40206.md): WordPress WP 404 Auto Redirect to Similar Post Plugin \<= 1.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, hwk-fr WP 404 Auto Redirect to Similar Post)
- [CVE-2023-4616](https://cve.now/CVE-2023-4616.md): thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability (CVSS 7.5, LG Electronics LG-LED Assistant)
- [CVE-2023-40208](https://cve.now/CVE-2023-40208.md): WordPress Stock Ticker Plugin \<= 3.23.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Aleksandar Urošević Stock Ticker)
- [CVE-2023-4615](https://cve.now/CVE-2023-4615.md): updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability (CVSS 7.5, LG Electronics LG-LED Assistant)
- [CVE-2023-4614](https://cve.now/CVE-2023-4614.md): setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability (CVSS 9.8, LG Electronics LG-LED Assistant)
- [CVE-2023-39992](https://cve.now/CVE-2023-39992.md): WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin \<= 4.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, vCita.com Online Booking & Scheduling Calendar for WordPres…)
- [CVE-2023-30494](https://cve.now/CVE-2023-30494.md): WordPress ImageRecycle pdf & image compression Plugin \<= 3.1.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ImageRecycle pdf & image compression)
- [CVE-2023-31220](https://cve.now/CVE-2023-31220.md): WordPress WP Categories Widget Plugin \<= 2.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WP-EXPERTS.IN TEAM WP Categories Widget)
- [CVE-2023-37393](https://cve.now/CVE-2023-37393.md): WordPress Atarim Plugin \<= 3.9.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Visual Website Collaboration, Feedback & Project Management…)
- [CVE-2023-39988](https://cve.now/CVE-2023-39988.md): WordPress WxSync Plugin \<= 2.7.23 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, 标准云(std.cloud) WxSync)
- [CVE-2023-39991](https://cve.now/CVE-2023-39991.md): WordPress BigBlueButton Plugin \<= 3.0.0-beta.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Blindside Networks BigBlueButton)
- [CVE-2023-39987](https://cve.now/CVE-2023-39987.md): WordPress wSecure Lite Plugin \<= 2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ajay Lulia wSecure Lite)
- [CVE-2023-39918](https://cve.now/CVE-2023-39918.md): WordPress Booking Package Plugin \<= 1.6.01 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, SAASPROJECT Booking Package Booking Package)
- [CVE-2023-39919](https://cve.now/CVE-2023-39919.md): WordPress wpShopGermany – Protected Shops Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, maennchen1.de wpShopGermany – Protected Shops)
- [CVE-2023-25465](https://cve.now/CVE-2023-25465.md): WordPress wp tell a friend popup form Plugin \<= 7.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy wp tell a friend popup form)
- [CVE-2023-39162](https://cve.now/CVE-2023-39162.md): WordPress User Email Verification for WooCommerce Plugin \<= 3.5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, XLPlugins User Email Verification for WooCommerce)
- [CVE-2023-39164](https://cve.now/CVE-2023-39164.md): WordPress Molongui Plugin \<= 4.6.19 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Author Box for Authors, Co-Authors, Multiple Authors and Gu…)
- [CVE-2023-36382](https://cve.now/CVE-2023-36382.md): WordPress Media Library Categories Plugin \<= 2.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Jeffrey-WP Media Library Categories)
- [CVE-2023-4756](https://cve.now/CVE-2023-4756.md): Stack-based Buffer Overflow in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-4754](https://cve.now/CVE-2023-4754.md): Out-of-bounds Write in gpac/gpac (CVSS 5.3, gpac/gpac)
- [CVE-2023-4613](https://cve.now/CVE-2023-4613.md): Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability (CVSS 9.8, LG Electronics LG-LED Assistant)
- [CVE-2023-32817](https://cve.now/CVE-2023-32817.md): In gnss service, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2023-32816](https://cve.now/CVE-2023-32816.md): In gnss service, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2023-32815](https://cve.now/CVE-2023-32815.md): In gnss service, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT…)
- [CVE-2023-32814](https://cve.now/CVE-2023-32814.md): In gnss service, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT…)
- [CVE-2023-32813](https://cve.now/CVE-2023-32813.md): In gnss service, there is a possible out of bounds write due to improper input validation. (no CVSS, MediaTek MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT…)
- [CVE-2023-32812](https://cve.now/CVE-2023-32812.md): In gnss service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT2713, MT2735, MT6580, MT6739, MT6761, MT6765, MT…)
- [CVE-2023-32811](https://cve.now/CVE-2023-32811.md): In connectivity system driver, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT2713, MT6779, MT6781, MT6785, MT6789, MT6833, MT…)
- [CVE-2023-32810](https://cve.now/CVE-2023-32810.md): In bluetooth driver, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT2713, MT5221, MT6833, MT6853, MT6855, MT6873, MT…)
- [CVE-2023-32809](https://cve.now/CVE-2023-32809.md): In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. (no CVSS, MediaTek MT2713, MT6779, MT6781, MT6785, MT6789, MT6833, MT…)
- [CVE-2023-32808](https://cve.now/CVE-2023-32808.md): In bluetooth driver, there is a possible read and write access to registers due to improper access control of register interface. (no CVSS, MediaTek MT2713, MT6779, MT6781, MT6785, MT6789, MT6833, MT…)
- [CVE-2023-32807](https://cve.now/CVE-2023-32807.md): In wlan service, there is a possible out of bounds read due to improper input validation. (no CVSS, MediaTek MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT…)
- [CVE-2023-32806](https://cve.now/CVE-2023-32806.md): In wlan driver, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, M…)
- [CVE-2023-32805](https://cve.now/CVE-2023-32805.md): In power, there is a possible out of bounds write due to an insecure default value. (no CVSS, MediaTek MT8168, MT8675)
- [CVE-2023-20851](https://cve.now/CVE-2023-20851.md): In stc, there is a possible out of bounds read due to a race condition. (no CVSS, MediaTek MT8188)
- [CVE-2023-20850](https://cve.now/CVE-2023-20850.md): In imgsys\_cmdq, there is a possible out of bounds write due to a missing valid range checking. (CVSS 6.5, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20849](https://cve.now/CVE-2023-20849.md): In imgsys\_cmdq, there is a possible use after free due to a missing valid range checking. (CVSS 6.5, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20848](https://cve.now/CVE-2023-20848.md): In imgsys\_cmdq, there is a possible out of bounds read due to a missing valid range checking. (CVSS 6.5, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20847](https://cve.now/CVE-2023-20847.md): In imgsys\_cmdq, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20846](https://cve.now/CVE-2023-20846.md): In imgsys\_cmdq, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20845](https://cve.now/CVE-2023-20845.md): In imgsys, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395)
- [CVE-2023-20844](https://cve.now/CVE-2023-20844.md): In imgsys\_cmdq, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20843](https://cve.now/CVE-2023-20843.md): In imgsys\_cmdq, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT…)
- [CVE-2023-20842](https://cve.now/CVE-2023-20842.md): In imgsys\_cmdq, there is a possible out of bounds write due to a missing valid range checking. (CVSS 6.5, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20841](https://cve.now/CVE-2023-20841.md): In imgsys, there is a possible out of bounds write due to a missing valid range checking. (CVSS 6.5, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20840](https://cve.now/CVE-2023-20840.md): In imgsys, there is a possible out of bounds read and write due to a missing valid range checking. (CVSS 6.5, MediaTek MT6895, MT6897, MT6983, MT8188, MT8195, MT8395)
- [CVE-2023-20839](https://cve.now/CVE-2023-20839.md): In imgsys, there is a possible out of bounds read due to a missing valid range checking. (no CVSS, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20838](https://cve.now/CVE-2023-20838.md): In imgsys, there is a possible out of bounds read due to a race condition. (no CVSS, MediaTek MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20837](https://cve.now/CVE-2023-20837.md): In seninf, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT…)
- [CVE-2023-20836](https://cve.now/CVE-2023-20836.md): In camsys, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6762, MT6765, MT6768, MT6771, MT6779, MT6781, MT…)
- [CVE-2023-20835](https://cve.now/CVE-2023-20835.md): In camsys, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6895, MT6983, MT8188, MT8195, MT8395, MT8781)
- [CVE-2023-20834](https://cve.now/CVE-2023-20834.md): In pda, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8175, MT…)
- [CVE-2023-20833](https://cve.now/CVE-2023-20833.md): In keyinstall, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20832](https://cve.now/CVE-2023-20832.md): In gps, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20831](https://cve.now/CVE-2023-20831.md): In gps, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20830](https://cve.now/CVE-2023-20830.md): In gps, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2713, MT2735, MT6761, MT6762, MT6765, MT6768, MT…)
- [CVE-2023-20829](https://cve.now/CVE-2023-20829.md): In gps, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20828](https://cve.now/CVE-2023-20828.md): In gps, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2735, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20827](https://cve.now/CVE-2023-20827.md): In ims service, there is a possible memory corruption due to a race condition. (CVSS 6.7, MediaTek MT6761, MT6762, MT6763, MT6768, MT6769, MT6771, MT…)
- [CVE-2023-20826](https://cve.now/CVE-2023-20826.md): In cta, there is a possible information disclosure due to a missing permission check. (CVSS 5.5, MediaTek MT6580, MT6761, MT6765, MT6779, MT6785, MT6789, MT…)
- [CVE-2023-20825](https://cve.now/CVE-2023-20825.md): In duraspeed, there is a possible information disclosure due to a missing permission check. (no CVSS, MediaTek MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT…)
- [CVE-2023-20824](https://cve.now/CVE-2023-20824.md): In duraspeed, there is a possible information disclosure due to a missing permission check. (no CVSS, MediaTek MT2713, MT6580, MT6735, MT6739, MT6761, MT6762, MT…)
- [CVE-2023-20823](https://cve.now/CVE-2023-20823.md): In cmdq, there is a possible out of bounds read due to an incorrect status check. (no CVSS, MediaTek MT6768, MT6781, MT6785, MT6833, MT6853, MT6853T, M…)
- [CVE-2023-20822](https://cve.now/CVE-2023-20822.md): In netdagent, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT…)
- [CVE-2023-20821](https://cve.now/CVE-2023-20821.md): In nvram, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2713, MT2735, MT6833, MT6835, MT6853, MT6855, MT…)
- [CVE-2023-20820](https://cve.now/CVE-2023-20820.md): In wlan service, there is a possible command injection due to improper input validation. (no CVSS, MediaTek MT6890, MT7603, MT7612, MT7613, MT7615, MT7622, MT…)
- [CVE-2023-33915](https://cve.now/CVE-2023-33915.md): In LTE protocol stack, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000)
- [CVE-2023-33914](https://cve.now/CVE-2023-33914.md): In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. (no CVSS, Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000)
- [CVE-2022-48453](https://cve.now/CVE-2022-48453.md): In camera driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E)
- [CVE-2022-48452](https://cve.now/CVE-2022-48452.md): In Ifaa service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-47353](https://cve.now/CVE-2022-47353.md): In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System exe (CVSS 4.4, Unisoc (Shanghai) Technologies Co. T610/T618/T760/T770/T820…)
- [CVE-2022-47352](https://cve.now/CVE-2022-47352.md): In camera driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T610/T618)
- [CVE-2023-38554](https://cve.now/CVE-2023-38554.md): In wcn bsp driver, there is a possible out of bounds write due to a missing bounds check.This could lead to local denial of service with no (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38553](https://cve.now/CVE-2023-38553.md): In gnss service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38468](https://cve.now/CVE-2023-38468.md): In urild service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38467](https://cve.now/CVE-2023-38467.md): In urild service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38466](https://cve.now/CVE-2023-38466.md): In ims service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T310/T60…)
- [CVE-2023-38465](https://cve.now/CVE-2023-38465.md): In ims service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T310/T60…)
- [CVE-2023-38464](https://cve.now/CVE-2023-38464.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38463](https://cve.now/CVE-2023-38463.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38462](https://cve.now/CVE-2023-38462.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38461](https://cve.now/CVE-2023-38461.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38460](https://cve.now/CVE-2023-38460.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38459](https://cve.now/CVE-2023-38459.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38458](https://cve.now/CVE-2023-38458.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38457](https://cve.now/CVE-2023-38457.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38456](https://cve.now/CVE-2023-38456.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38455](https://cve.now/CVE-2023-38455.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38454](https://cve.now/CVE-2023-38454.md): In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38453](https://cve.now/CVE-2023-38453.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38452](https://cve.now/CVE-2023-38452.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38451](https://cve.now/CVE-2023-38451.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38450](https://cve.now/CVE-2023-38450.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T606/T61…)
- [CVE-2023-38449](https://cve.now/CVE-2023-38449.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38448](https://cve.now/CVE-2023-38448.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38447](https://cve.now/CVE-2023-38447.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38446](https://cve.now/CVE-2023-38446.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38445](https://cve.now/CVE-2023-38445.md): In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privi (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38444](https://cve.now/CVE-2023-38444.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38443](https://cve.now/CVE-2023-38443.md): In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38442](https://cve.now/CVE-2023-38442.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38441](https://cve.now/CVE-2023-38441.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38440](https://cve.now/CVE-2023-38440.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38439](https://cve.now/CVE-2023-38439.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC9832E/SC9863A/T606/T61…)
- [CVE-2023-38438](https://cve.now/CVE-2023-38438.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38437](https://cve.now/CVE-2023-38437.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-38436](https://cve.now/CVE-2023-38436.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33918](https://cve.now/CVE-2023-33918.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33917](https://cve.now/CVE-2023-33917.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-33916](https://cve.now/CVE-2023-33916.md): In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-4749](https://cve.now/CVE-2023-4749.md): SourceCodester Inventory Management System index.php file inclusion (CVSS 6.3, SourceCodester Inventory Management System)
- [CVE-2023-4747](https://cve.now/CVE-2023-4747.md): DedeCMS tags.php sql injection (CVSS 6.3, DedeCMS)
- [CVE-2023-4746](https://cve.now/CVE-2023-4746.md): TOTOLINK N200RE V5 Validity\_check format string (CVSS 8.8, TOTOLINK N200RE)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.