CVEs published December 4, 2023
242 CVEs were published on December 4, 2023: 7 critical, 38 high.
- Published
- 242
- Critical
- 7
- High
- 38
- Medium
- 29
- Low
- 2
- Unrated
- 166
- Now in CISA KEV
- 0
- Fix available
- 33
Most affected products
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 73
- Google Android
- 47
- MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- 12
- Dell PowerProtect Data Manager DM5500 Appliance
- 7
- SierraWireless ALEOS
- 7
- IBM Db2 for Linux, UNIX and Windows
- 6
- MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- 6
- Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- 6
- squid-cache squid
- 3
- Welcart e-Commerce
- 3
Critical 7
- CVE-2023-49291Improper Sanitization of Branch Name Leads to Arbitrary Code Injectiontj-actions branch-names
- CVE-2023-40077In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition.Google Android
- CVE-2023-21216In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21166In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-49093HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTLhtmlunit · org.htmlunit:htmlunit
- CVE-2023-24049An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credent
- CVE-2023-48910Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download.io.github.microcks:microcks
High 38
- CVE-2023-5808System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data.Hitachi Vantara System Management Unit
- CVE-2023-5944Delta Electronics DOPSoft Stack-based Buffer OverflowDelta Electronics DOPSoft
- CVE-2023-40465Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-40464Use of hardcoded certificate and private keySierraWireless ALEOS
- CVE-2023-40463Use of Hard-Coded CredentialsSierraWireless ALEOS
- CVE-2023-49285Denial of Service in HTTP Message Processing in Squidsquid-cache squid
- CVE-2023-40462Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-49286Denial of Service in Helper Process managementsquid-cache squid
- CVE-2023-40461Cross-site scripting vulnerability in ACEManagerSierraWireless ALEOS
- CVE-2023-40460Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-49288Denial of Service in HTTP Collapsed Forwarding in Squidsquid-cache squid
- CVE-2023-40459Improper input leads to DoSSierraWireless ALEOS
- CVE-2023-40088In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after freGoogle Android
- CVE-2023-49280Data leak of password hash through xwiki change requestxwiki-contrib application-changerequest · org.xwiki.contrib…
- CVE-2023-5953Welcart e-Commerce < 2.9.5 - Subscriber+ Arbitrary File UploadWelcart e-Commerce
- CVE-2023-47633Uncontrolled Resource Consumption in Traefiktraefik · github.com/traefik/traefik +2
- CVE-2023-44302 Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-6481Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fixQOS.CH Sarl logback · ch.qos.logback:logback-core
- CVE-2023-44305 Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44304 Dell DM5500 contains a privilege escalation vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44291 Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-49287Buffer overflow vulnerabilities in tinydircxong tinydir
- CVE-2023-32843In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-42747In camera service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42740In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42736In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42716In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42694In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42688In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42685In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42681In ion service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-38003IBM Db2 command executionIBM Db2 for Linux, UNIX and Windows
- CVE-2023-24046An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in th
- CVE-2023-24047An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via
- CVE-2023-24048Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via c
- CVE-2023-24051A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute fo
- CVE-2023-24052An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functiona
- CVE-2023-48863SEMCMS 3.9 is vulnerable to SQL Injection.
Medium, low and unrated 197
- CVE-2023-49289Cross-site Scripting in Ajax.NET Professionalmichaelschwarz Ajax.NET-Professional · AjaxNetProfessional
- CVE-2023-49284Command substitution output can trigger shell expansion in fish shellfish-shell
- CVE-2023-49290Malicious parameters can cause a denial of service in lestrrat-go/jwxlestrrat-go jwx · github.com/lestrrat-go/jwx +1
- CVE-2023-49292Possible private key restoration in go package github.com/ecies/goecies go · github.com/ecies/go/v2
- CVE-2023-49293Cross-site Scripting in `server.transformIndexHtml` via URL payload in vitevitejs vite · vite
- CVE-2023-45781In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-45779In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.Google Android
- CVE-2023-45777In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privilGoogle Android
- CVE-2023-45776In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-45775In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-45774In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy.Google Android
- CVE-2023-45773In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-40103In multiple locations, there is a possible way to corrupt memory due to a double free.Google Android
- CVE-2023-40098In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic erroGoogle Android
- CVE-2023-40097In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation.Google Android
- CVE-2023-40096In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing fGoogle Android
- CVE-2023-40095In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check.Google Android
- CVE-2023-40094In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check.Google Android
- CVE-2023-40092In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy.Google Android
- CVE-2023-40091In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption.Google Android
- CVE-2023-40090In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure.Google Android
- CVE-2023-40089In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers withoutGoogle Android
- CVE-2023-40087In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2023-40084In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.Google Android
- CVE-2023-40083In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-40082In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto.Google Android
- CVE-2023-40081In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40080In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code.Google Android
- CVE-2023-40079In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass.Google Android
- CVE-2023-40078In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overfGoogle Android
- CVE-2023-40076In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypaGoogle Android
- CVE-2023-40075In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check.Google Android
- CVE-2023-40074In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privilegeGoogle Android
- CVE-2023-40073In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy.Google Android
- CVE-2023-35690 In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.Google Android
- CVE-2023-35668In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy.Google Android
- CVE-2023-21403In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception.Google Android
- CVE-2023-21402In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation.Google Android
- CVE-2023-21401In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-21263 In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception.Google Android
- CVE-2023-21228In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21227In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure.Google Android
- CVE-2023-21218In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2023-21217In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-21215In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition.Google Android
- CVE-2023-21164In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21163In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-21162In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free.Google Android
- CVE-2023-5809Popup box < 3.8.6 - Admin+ Stored XSS in CategoriesPopup box
- CVE-2023-5141BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site ScriptingBSK Contact Form 7 Blacklist
- CVE-2023-6063WP Fastest Cache < 1.2.2 - Unauthenticated SQL InjectionWP Fastest Cache
- CVE-2023-5884Word Balloon < 4.20.3 - Avatar Removal via CSRFWord Balloon
- CVE-2023-5108Easy Newsletter Signups <= 1.0.4 - Admin+ SQLiEasy Newsletter Signups
- CVE-2023-5990Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRFInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2023-5210AMP+ Plus <= 3.0 - Reflected Cross Site ScriptingAMP+ Plus
- CVE-2023-4460Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVGUploading SVG, WEBP and ICO files
- CVE-2023-5951Welcart e-Commerce < 2.9.5 - Reflected XSSWelcart e-Commerce
- CVE-2023-5137Simply Excerpts <= 1.4 - Admin+ Stored XSSSimply Excerpts
- CVE-2023-5762Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar extFilr
- CVE-2023-5874Popup box < 3.8.6 - Admin+ Stored XSS in Popup SettingsPopup box
- CVE-2023-5952Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object InjectionWelcart e-Commerce
- CVE-2023-5105Frontend File Manager < 22.6 - Editor+ Arbitrary File DownloadFrontend File Manager Plugin
- CVE-2023-5979eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRFeCommerce Product Catalog Plugin for WordPress
- CVE-2023-49080Jupyter Server errors include tracebacks with path informationjupyter-server jupyter_server · jupyter-server
- CVE-2023-47106Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefiktraefik · github.com/traefik/traefik +2
- CVE-2023-47124Denial of service whith ACME HTTPChallenge in Traefiktraefik · github.com/traefik/traefik/v2 +2
- CVE-2023-5768A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series
- CVE-2023-5767 A vulnerability exists in the webserver that affects the RTU500 series product versions listed below.Hitachi Energy RTU500
- CVE-2023-6460Information leak in nodejs-firestoreGoogle nodejs-firestore · @google-cloud/firestore
- CVE-2023-32804Mali GPU Userspace Driver can make an Out-of-Bounds accessArm Midgard GPU Userspace Driver · Arm Bifrost GPU Users… +2
- CVE-2023-44301 Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44300 Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-44306 Dell DM5500 contains a path traversal vulnerability in the appliance.Dell PowerProtect Data Manager DM5500 Appliance
- CVE-2023-5332Dependency on Vulnerable Third-Party Component in GitLabGitLab
- CVE-2023-49108Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a).Sumitomo Electric Information Systems Co. RakRak Document P…
- CVE-2023-32870In display drm, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32869In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32868In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32867In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32866In mmp, there is a possible memory corruption due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32865In display drm, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32864In display drm, there is a possible out of bounds write due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32863In display drm, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32862In display, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32861In display, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32860In display, there is a possible classic buffer overflow due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32859In meta, there is a possible classic buffer overflow due to a missing bounds check.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-32846In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32845In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32844In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32842In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32841In 5G Modem, there is a possible system crash due to improper error handling.MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…
- CVE-2023-32858In GZ, there is a possible information disclosure due to a missing data erasing.MediaTek MT6761, MT6765, MT6771, MT6835, MT6886, MT6983, MT…
- CVE-2023-32857In display, there is a possible out of bounds read due to an incorrect status check.MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…
- CVE-2023-32856In display, there is a possible out of bounds read due to an incorrect status check.MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…
- CVE-2023-32855In aee, there is a possible escalation of privilege due to a missing permission check.MediaTek MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT…
- CVE-2023-32854In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT…
- CVE-2023-32853In rpmb, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT…
- CVE-2023-32852In cameraisp, there is a possible information disclosure due to improper input validation.MediaTek MT6779
- CVE-2023-32849In cmdq, there is a possible out of bounds write due to type confusion.MediaTek MT6781, MT6785, MT6833, MT6853, MT6873, MT6885, MT…
- CVE-2023-32851In decoder, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…
- CVE-2023-32850In decoder, there is a possible out of bounds write due to an integer overflow.MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…
- CVE-2023-32848In vdec, there is a possible out of bounds write due to type confusion.MediaTek MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2023-32847In audio, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT…
- CVE-2023-29258IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-40687IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-38727IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-42749In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42748In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42746In power manager, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42745In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42744In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42743In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42742In sysui, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42741In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42739In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42738In telocom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42737In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42735In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42734In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42733In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42732In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48464In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48463In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2022-48462In wifi service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42751In gnss service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42731In Gnss service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616
- CVE-2023-42730In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42729In ril service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42728In phasecheckserver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42727In gpu driver, there is a possible out of bounds write due to a incorrect bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42726In TeleService, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42725In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42724In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42723In camera service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42722In camera service, there is a possible use after free due to a logic error.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42721In flv extractor, there is a possible missing verification incorrect input.Unisoc (Shanghai) Technologies Co. SC9863A
- CVE-2023-42720In video service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000
- CVE-2023-42719In video service, there is a possible out of bounds read due to a incorrect bounds check.Unisoc (Shanghai) Technologies Co. T606/T612/T616
- CVE-2023-42718In dialer, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42717In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42715In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42714In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42713In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42712In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42711In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42710In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42709In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42708In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42707In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42706In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42705In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42704In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42703In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42702In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42701In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42700In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42699In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42698In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42697In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42696In telecom service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42695In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42693In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42692In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42691In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42690In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42689In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42687In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42686In wifi service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42684In gsp driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42683In gsp driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42682In gsp driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42680In gpu driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42679In gpu driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…
- CVE-2023-42678In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42677In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42676In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42675In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42674In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42673In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42672In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-42671In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-47701IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-46167IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2022-46480Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allo
- CVE-2023-24050Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string w
- CVE-2023-26941Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the orig
- CVE-2023-26942Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the orig
- CVE-2023-26943Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the orig
- CVE-2023-41613EzViz Studio v2.2.0 is vulnerable to DLL hijacking.
- CVE-2023-48799TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.
- CVE-2023-48800In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them thr
- CVE-2023-48815kkFileView v4.3.0 is vulnerable to Incorrect Access Control.
- CVE-2023-48866A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/ob
- CVE-2023-48965An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download
- CVE-2023-48966An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary czoujingli/thinkadmin
- CVE-2023-48967Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.org.noear:solon