# CVEs published 2023-12-04

242 CVEs were published on December 4, 2023: 7 critical, 38 high. Days are UTC.

- [CVE-2023-5808](https://cve.now/CVE-2023-5808.md): System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure via unprivileged access to HNAS configuration backup and diagnostic data. (CVSS 7.6, Hitachi Vantara System Management Unit)
- [CVE-2023-49289](https://cve.now/CVE-2023-49289.md): Cross-site Scripting in Ajax.NET Professional (CVSS 6.3, michaelschwarz Ajax.NET-Professional · AjaxNetProfessional)
- [CVE-2023-49284](https://cve.now/CVE-2023-49284.md): Command substitution output can trigger shell expansion in fish shell (CVSS 3.9, fish-shell)
- [CVE-2023-49290](https://cve.now/CVE-2023-49290.md): Malicious parameters can cause a denial of service in lestrrat-go/jwx (CVSS 5.3, lestrrat-go jwx · github.com/lestrrat-go/jwx +1)
- [CVE-2023-49291](https://cve.now/CVE-2023-49291.md): Improper Sanitization of Branch Name Leads to Arbitrary Code Injection (CVSS 9.3, tj-actions branch-names)
- [CVE-2023-49292](https://cve.now/CVE-2023-49292.md): Possible private key restoration in go package github.com/ecies/go (CVSS 4.9, ecies go · github.com/ecies/go/v2)
- [CVE-2023-5944](https://cve.now/CVE-2023-5944.md): Delta Electronics DOPSoft Stack-based Buffer Overflow (CVSS 7.8, Delta Electronics DOPSoft)
- [CVE-2023-49293](https://cve.now/CVE-2023-49293.md): Cross-site Scripting in \`server.transformIndexHtml\` via URL payload in vite (CVSS 6.1, vitejs vite · vite)
- [CVE-2023-40465](https://cve.now/CVE-2023-40465.md): Improper input leads to DoS (CVSS 8.3, SierraWireless ALEOS)
- [CVE-2023-40464](https://cve.now/CVE-2023-40464.md): Use of hardcoded certificate and private key (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-40463](https://cve.now/CVE-2023-40463.md): Use of Hard-Coded Credentials (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-49285](https://cve.now/CVE-2023-49285.md): Denial of Service in HTTP Message Processing in Squid (CVSS 8.6, squid-cache squid)
- [CVE-2023-40462](https://cve.now/CVE-2023-40462.md): Improper input leads to DoS (CVSS 7.5, SierraWireless ALEOS)
- [CVE-2023-49286](https://cve.now/CVE-2023-49286.md): Denial of Service in Helper Process management (CVSS 8.6, squid-cache squid)
- [CVE-2023-40461](https://cve.now/CVE-2023-40461.md): Cross-site scripting vulnerability in ACEManager (CVSS 8.1, SierraWireless ALEOS)
- [CVE-2023-40460](https://cve.now/CVE-2023-40460.md): Improper input leads to DoS (CVSS 7.1, SierraWireless ALEOS)
- [CVE-2023-49288](https://cve.now/CVE-2023-49288.md): Denial of Service in HTTP Collapsed Forwarding in Squid (CVSS 8.6, squid-cache squid)
- [CVE-2023-40459](https://cve.now/CVE-2023-40459.md): Improper input leads to DoS (CVSS 7.5, SierraWireless ALEOS)
- [CVE-2023-45781](https://cve.now/CVE-2023-45781.md): In parse\_gap\_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45779](https://cve.now/CVE-2023-45779.md): In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2023-45777](https://cve.now/CVE-2023-45777.md): In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privil (no CVSS, Google Android)
- [CVE-2023-45776](https://cve.now/CVE-2023-45776.md): In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45775](https://cve.now/CVE-2023-45775.md): In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-45774](https://cve.now/CVE-2023-45774.md): In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user's image due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-45773](https://cve.now/CVE-2023-45773.md): In multiple functions of btm\_ble\_gap.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40103](https://cve.now/CVE-2023-40103.md): In multiple locations, there is a possible way to corrupt memory due to a double free. (no CVSS, Google Android)
- [CVE-2023-40098](https://cve.now/CVE-2023-40098.md): In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic erro (no CVSS, Google Android)
- [CVE-2023-40097](https://cve.now/CVE-2023-40097.md): In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-40096](https://cve.now/CVE-2023-40096.md): In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing f (no CVSS, Google Android)
- [CVE-2023-40095](https://cve.now/CVE-2023-40095.md): In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. (no CVSS, Google Android)
- [CVE-2023-40094](https://cve.now/CVE-2023-40094.md): In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-40092](https://cve.now/CVE-2023-40092.md): In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40091](https://cve.now/CVE-2023-40091.md): In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. (no CVSS, Google Android)
- [CVE-2023-40090](https://cve.now/CVE-2023-40090.md): In BTM\_BleVerifySignature of btm\_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. (no CVSS, Google Android)
- [CVE-2023-40089](https://cve.now/CVE-2023-40089.md): In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without (no CVSS, Google Android)
- [CVE-2023-40088](https://cve.now/CVE-2023-40088.md): In callback\_thread\_event of com\_android\_bluetooth\_btservice\_AdapterService.cpp, there is a possible memory corruption due to a use after fre (CVSS 8.8, Google Android)
- [CVE-2023-40087](https://cve.now/CVE-2023-40087.md): In transcodeQ\*ToFloat of btif\_avrcp\_audio\_track.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40084](https://cve.now/CVE-2023-40084.md): In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. (no CVSS, Google Android)
- [CVE-2023-40083](https://cve.now/CVE-2023-40083.md): In parse\_gap\_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40082](https://cve.now/CVE-2023-40082.md): In modify\_for\_next\_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2023-40081](https://cve.now/CVE-2023-40081.md): In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40080](https://cve.now/CVE-2023-40080.md): In multiple functions of btm\_ble\_gap.cc, there is a possible out of bounds write due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-40079](https://cve.now/CVE-2023-40079.md): In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. (no CVSS, Google Android)
- [CVE-2023-40078](https://cve.now/CVE-2023-40078.md): In a2dp\_vendor\_opus\_decoder\_decode\_packet of a2dp\_vendor\_opus\_decoder.cc, there is a possible out of bounds write due to a heap buffer overf (no CVSS, Google Android)
- [CVE-2023-40077](https://cve.now/CVE-2023-40077.md): In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. (CVSS 9.8, Google Android)
- [CVE-2023-40076](https://cve.now/CVE-2023-40076.md): In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypa (CVSS 5.5, Google Android)
- [CVE-2023-40075](https://cve.now/CVE-2023-40075.md): In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-40074](https://cve.now/CVE-2023-40074.md): In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privilege (no CVSS, Google Android)
- [CVE-2023-40073](https://cve.now/CVE-2023-40073.md): In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. (no CVSS, Google Android)
- [CVE-2023-35690](https://cve.now/CVE-2023-35690.md): In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-35668](https://cve.now/CVE-2023-35668.md): In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21403](https://cve.now/CVE-2023-21403.md): In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-21402](https://cve.now/CVE-2023-21402.md): In MMU\_UnmapPages of mmu\_common.c, there is a possible out of bounds read due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-21401](https://cve.now/CVE-2023-21401.md): In DevmemIntChangeSparse of devicemem\_server.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-21263](https://cve.now/CVE-2023-21263.md): In OSMMapPMRGeneric of pmr\_os.c, there is a possible out of bounds write due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2023-21228](https://cve.now/CVE-2023-21228.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21227](https://cve.now/CVE-2023-21227.md): In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. (no CVSS, Google Android)
- [CVE-2023-21218](https://cve.now/CVE-2023-21218.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21217](https://cve.now/CVE-2023-21217.md): In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-21216](https://cve.now/CVE-2023-21216.md): In PMRChangeSparseMemOSMem of physmem\_osmem\_linux.c, there is a possible arbitrary code execution due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2023-21215](https://cve.now/CVE-2023-21215.md): In DevmemIntAcquireRemoteCtx of devicemem\_server.c, there is a possible arbitrary code execution due to a race condition. (no CVSS, Google Android)
- [CVE-2023-21166](https://cve.now/CVE-2023-21166.md): In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. (CVSS 9.8, Google Android)
- [CVE-2023-21164](https://cve.now/CVE-2023-21164.md): In DevmemIntMapPMR of devicemem\_server.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-21163](https://cve.now/CVE-2023-21163.md): In PMR\_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-21162](https://cve.now/CVE-2023-21162.md): In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. (no CVSS, Google Android)
- [CVE-2023-49280](https://cve.now/CVE-2023-49280.md): Data leak of password hash through xwiki change request (CVSS 7.7, xwiki-contrib application-changerequest · org.xwiki.contrib…)
- [CVE-2023-5809](https://cve.now/CVE-2023-5809.md): Popup box \< 3.8.6 - Admin+ Stored XSS in Categories (no CVSS, Popup box)
- [CVE-2023-5141](https://cve.now/CVE-2023-5141.md): BSK Contact Form 7 Blacklist \<= 1.0.1 - Reflected Cross-Site Scripting (no CVSS, BSK Contact Form 7 Blacklist)
- [CVE-2023-6063](https://cve.now/CVE-2023-6063.md): WP Fastest Cache \< 1.2.2 - Unauthenticated SQL Injection (no CVSS, WP Fastest Cache)
- [CVE-2023-5884](https://cve.now/CVE-2023-5884.md): Word Balloon \< 4.20.3 - Avatar Removal via CSRF (no CVSS, Word Balloon)
- [CVE-2023-5108](https://cve.now/CVE-2023-5108.md): Easy Newsletter Signups \<= 1.0.4 - Admin+ SQLi (no CVSS, Easy Newsletter Signups)
- [CVE-2023-5990](https://cve.now/CVE-2023-5990.md): Funnelforms Free \< 3.4.2 - Form Deletion/Duplication via CSRF (no CVSS, Interactive Contact Form and Multi Step Form Builder with D…)
- [CVE-2023-5210](https://cve.now/CVE-2023-5210.md): AMP+ Plus \<= 3.0 - Reflected Cross Site Scripting (no CVSS, AMP+ Plus)
- [CVE-2023-4460](https://cve.now/CVE-2023-4460.md): Uploading SVG, WEBP and ICO files \<= 1.2.1 - Author+ Stored XSS via SVG (CVSS 6.1, Uploading SVG, WEBP and ICO files)
- [CVE-2023-5951](https://cve.now/CVE-2023-5951.md): Welcart e-Commerce \< 2.9.5 - Reflected XSS (CVSS 6.1, Welcart e-Commerce)
- [CVE-2023-5137](https://cve.now/CVE-2023-5137.md): Simply Excerpts \<= 1.4 - Admin+ Stored XSS (CVSS 4.8, Simply Excerpts)
- [CVE-2023-5762](https://cve.now/CVE-2023-5762.md): Filr – Secure document library \< 1.2.3.6 - Author+ RCE via file upload with phar ext (no CVSS, Filr)
- [CVE-2023-5874](https://cve.now/CVE-2023-5874.md): Popup box \< 3.8.6 - Admin+ Stored XSS in Popup Settings (no CVSS, Popup box)
- [CVE-2023-5953](https://cve.now/CVE-2023-5953.md): Welcart e-Commerce \< 2.9.5 - Subscriber+ Arbitrary File Upload (CVSS 8.8, Welcart e-Commerce)
- [CVE-2023-5952](https://cve.now/CVE-2023-5952.md): Welcart e-Commerce \< 2.9.5 - Unauthenticated PHP Object Injection (no CVSS, Welcart e-Commerce)
- [CVE-2023-5105](https://cve.now/CVE-2023-5105.md): Frontend File Manager \< 22.6 - Editor+ Arbitrary File Download (no CVSS, Frontend File Manager Plugin)
- [CVE-2023-5979](https://cve.now/CVE-2023-5979.md): eCommerce Product Catalog Plugin for WordPress \< 3.3.26 - Products Deletion via CSRF (no CVSS, eCommerce Product Catalog Plugin for WordPress)
- [CVE-2023-49080](https://cve.now/CVE-2023-49080.md): Jupyter Server errors include tracebacks with path information (CVSS 3.5, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2023-47633](https://cve.now/CVE-2023-47633.md): Uncontrolled Resource Consumption in Traefik (CVSS 7.5, traefik · github.com/traefik/traefik +2)
- [CVE-2023-47106](https://cve.now/CVE-2023-47106.md): Incorrect processing of fragment in the URL leads to Authorization Bypass in Traefik (CVSS 4.8, traefik · github.com/traefik/traefik +2)
- [CVE-2023-47124](https://cve.now/CVE-2023-47124.md): Denial of service whith ACME HTTPChallenge in Traefik (CVSS 5.9, traefik · github.com/traefik/traefik/v2 +2)
- [CVE-2023-5768](https://cve.now/CVE-2023-5768.md): A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. (CVSS 5.9, Hitachi Energy RTU500 series)
- [CVE-2023-5767](https://cve.now/CVE-2023-5767.md): A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. (CVSS 6.0, Hitachi Energy RTU500)
- [CVE-2023-6460](https://cve.now/CVE-2023-6460.md): Information leak in nodejs-firestore (CVSS 4.0, Google nodejs-firestore · @google-cloud/firestore)
- [CVE-2023-32804](https://cve.now/CVE-2023-32804.md): Mali GPU Userspace Driver can make an Out-of-Bounds access (no CVSS, Arm Midgard GPU Userspace Driver · Arm Bifrost GPU Users… +2)
- [CVE-2023-44302](https://cve.now/CVE-2023-44302.md): Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. (CVSS 8.1, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44301](https://cve.now/CVE-2023-44301.md): Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. (CVSS 5.4, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44300](https://cve.now/CVE-2023-44300.md): Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. (CVSS 5.5, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-6481](https://cve.now/CVE-2023-6481.md): Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix (CVSS 7.1, QOS.CH Sarl logback · ch.qos.logback:logback-core)
- [CVE-2023-44306](https://cve.now/CVE-2023-44306.md): Dell DM5500 contains a path traversal vulnerability in the appliance. (CVSS 6.5, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44305](https://cve.now/CVE-2023-44305.md): Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. (CVSS 8.1, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44304](https://cve.now/CVE-2023-44304.md): Dell DM5500 contains a privilege escalation vulnerability in the appliance. (CVSS 8.8, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-44291](https://cve.now/CVE-2023-44291.md): Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. (CVSS 7.2, Dell PowerProtect Data Manager DM5500 Appliance)
- [CVE-2023-5332](https://cve.now/CVE-2023-5332.md): Dependency on Vulnerable Third-Party Component in GitLab (CVSS 5.9, GitLab)
- [CVE-2023-49287](https://cve.now/CVE-2023-49287.md): Buffer overflow vulnerabilities in tinydir (CVSS 7.7, cxong tinydir)
- [CVE-2023-49108](https://cve.now/CVE-2023-49108.md): Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). (no CVSS, Sumitomo Electric Information Systems Co. RakRak Document P…)
- [CVE-2023-49093](https://cve.now/CVE-2023-49093.md): HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL (CVSS 9.8, htmlunit · org.htmlunit:htmlunit)
- [CVE-2023-32870](https://cve.now/CVE-2023-32870.md): In display drm, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32869](https://cve.now/CVE-2023-32869.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32868](https://cve.now/CVE-2023-32868.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32867](https://cve.now/CVE-2023-32867.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32866](https://cve.now/CVE-2023-32866.md): In mmp, there is a possible memory corruption due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32865](https://cve.now/CVE-2023-32865.md): In display drm, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32864](https://cve.now/CVE-2023-32864.md): In display drm, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32863](https://cve.now/CVE-2023-32863.md): In display drm, there is a possible out of bounds read due to a missing bounds check. (CVSS 6.7, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32862](https://cve.now/CVE-2023-32862.md): In display, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32861](https://cve.now/CVE-2023-32861.md): In display, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32860](https://cve.now/CVE-2023-32860.md): In display, there is a possible classic buffer overflow due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32859](https://cve.now/CVE-2023-32859.md): In meta, there is a possible classic buffer overflow due to a missing bounds check. (CVSS 6.7, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32846](https://cve.now/CVE-2023-32846.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32845](https://cve.now/CVE-2023-32845.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32844](https://cve.now/CVE-2023-32844.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32843](https://cve.now/CVE-2023-32843.md): In 5G Modem, there is a possible system crash due to improper error handling. (CVSS 7.5, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32842](https://cve.now/CVE-2023-32842.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32841](https://cve.now/CVE-2023-32841.md): In 5G Modem, there is a possible system crash due to improper error handling. (no CVSS, MediaTek MT2735, MT2737, MT6297, MT6298, MT6813, MT6815, MT…)
- [CVE-2023-32858](https://cve.now/CVE-2023-32858.md): In GZ, there is a possible information disclosure due to a missing data erasing. (no CVSS, MediaTek MT6761, MT6765, MT6771, MT6835, MT6886, MT6983, MT…)
- [CVE-2023-32857](https://cve.now/CVE-2023-32857.md): In display, there is a possible out of bounds read due to an incorrect status check. (no CVSS, MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32856](https://cve.now/CVE-2023-32856.md): In display, there is a possible out of bounds read due to an incorrect status check. (no CVSS, MediaTek MT6765, MT6768, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32855](https://cve.now/CVE-2023-32855.md): In aee, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT2735, MT2737, MT6765, MT6768, MT6769, MT6833, MT…)
- [CVE-2023-32854](https://cve.now/CVE-2023-32854.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6835, MT6879, MT6886, MT6895, MT6983, MT6985, MT…)
- [CVE-2023-32853](https://cve.now/CVE-2023-32853.md): In rpmb, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6781, MT…)
- [CVE-2023-32852](https://cve.now/CVE-2023-32852.md): In cameraisp, there is a possible information disclosure due to improper input validation. (no CVSS, MediaTek MT6779)
- [CVE-2023-32849](https://cve.now/CVE-2023-32849.md): In cmdq, there is a possible out of bounds write due to type confusion. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6873, MT6885, MT…)
- [CVE-2023-32851](https://cve.now/CVE-2023-32851.md): In decoder, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…)
- [CVE-2023-32850](https://cve.now/CVE-2023-32850.md): In decoder, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT…)
- [CVE-2023-32848](https://cve.now/CVE-2023-32848.md): In vdec, there is a possible out of bounds write due to type confusion. (CVSS 6.7, MediaTek MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2023-32847](https://cve.now/CVE-2023-32847.md): In audio, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT…)
- [CVE-2023-29258](https://cve.now/CVE-2023-29258.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-40687](https://cve.now/CVE-2023-40687.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38727](https://cve.now/CVE-2023-38727.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-42749](https://cve.now/CVE-2023-42749.md): In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42748](https://cve.now/CVE-2023-42748.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42747](https://cve.now/CVE-2023-42747.md): In camera service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42746](https://cve.now/CVE-2023-42746.md): In power manager, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42745](https://cve.now/CVE-2023-42745.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42744](https://cve.now/CVE-2023-42744.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42743](https://cve.now/CVE-2023-42743.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42742](https://cve.now/CVE-2023-42742.md): In sysui, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42741](https://cve.now/CVE-2023-42741.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42740](https://cve.now/CVE-2023-42740.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42739](https://cve.now/CVE-2023-42739.md): In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42738](https://cve.now/CVE-2023-42738.md): In telocom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42737](https://cve.now/CVE-2023-42737.md): In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42736](https://cve.now/CVE-2023-42736.md): In telecom service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42735](https://cve.now/CVE-2023-42735.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42734](https://cve.now/CVE-2023-42734.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42733](https://cve.now/CVE-2023-42733.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42732](https://cve.now/CVE-2023-42732.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48464](https://cve.now/CVE-2022-48464.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48463](https://cve.now/CVE-2022-48463.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2022-48462](https://cve.now/CVE-2022-48462.md): In wifi service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42751](https://cve.now/CVE-2023-42751.md): In gnss service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42731](https://cve.now/CVE-2023-42731.md): In Gnss service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616)
- [CVE-2023-42730](https://cve.now/CVE-2023-42730.md): In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42729](https://cve.now/CVE-2023-42729.md): In ril service, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42728](https://cve.now/CVE-2023-42728.md): In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42727](https://cve.now/CVE-2023-42727.md): In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42726](https://cve.now/CVE-2023-42726.md): In TeleService, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42725](https://cve.now/CVE-2023-42725.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42724](https://cve.now/CVE-2023-42724.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42723](https://cve.now/CVE-2023-42723.md): In camera service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42722](https://cve.now/CVE-2023-42722.md): In camera service, there is a possible use after free due to a logic error. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42721](https://cve.now/CVE-2023-42721.md): In flv extractor, there is a possible missing verification incorrect input. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A)
- [CVE-2023-42720](https://cve.now/CVE-2023-42720.md): In video service, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T760/T770/T820/S8000)
- [CVE-2023-42719](https://cve.now/CVE-2023-42719.md): In video service, there is a possible out of bounds read due to a incorrect bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. T606/T612/T616)
- [CVE-2023-42718](https://cve.now/CVE-2023-42718.md): In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42717](https://cve.now/CVE-2023-42717.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42716](https://cve.now/CVE-2023-42716.md): In telephony service, there is a possible missing permission check. (CVSS 7.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42715](https://cve.now/CVE-2023-42715.md): In telephony service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42714](https://cve.now/CVE-2023-42714.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42713](https://cve.now/CVE-2023-42713.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42712](https://cve.now/CVE-2023-42712.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42711](https://cve.now/CVE-2023-42711.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42710](https://cve.now/CVE-2023-42710.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42709](https://cve.now/CVE-2023-42709.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42708](https://cve.now/CVE-2023-42708.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42707](https://cve.now/CVE-2023-42707.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42706](https://cve.now/CVE-2023-42706.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42705](https://cve.now/CVE-2023-42705.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42704](https://cve.now/CVE-2023-42704.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42703](https://cve.now/CVE-2023-42703.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42702](https://cve.now/CVE-2023-42702.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42701](https://cve.now/CVE-2023-42701.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42700](https://cve.now/CVE-2023-42700.md): In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42699](https://cve.now/CVE-2023-42699.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42698](https://cve.now/CVE-2023-42698.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42697](https://cve.now/CVE-2023-42697.md): In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42696](https://cve.now/CVE-2023-42696.md): In telecom service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42695](https://cve.now/CVE-2023-42695.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42694](https://cve.now/CVE-2023-42694.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42693](https://cve.now/CVE-2023-42693.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42692](https://cve.now/CVE-2023-42692.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42691](https://cve.now/CVE-2023-42691.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42690](https://cve.now/CVE-2023-42690.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42689](https://cve.now/CVE-2023-42689.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42688](https://cve.now/CVE-2023-42688.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42687](https://cve.now/CVE-2023-42687.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42686](https://cve.now/CVE-2023-42686.md): In wifi service, there is a possible missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42685](https://cve.now/CVE-2023-42685.md): In wifi service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42684](https://cve.now/CVE-2023-42684.md): In gsp driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42683](https://cve.now/CVE-2023-42683.md): In gsp driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42682](https://cve.now/CVE-2023-42682.md): In gsp driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42681](https://cve.now/CVE-2023-42681.md): In ion service, there is a possible missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42680](https://cve.now/CVE-2023-42680.md): In gpu driver, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42679](https://cve.now/CVE-2023-42679.md): In gpu driver, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T606/T612/T…)
- [CVE-2023-42678](https://cve.now/CVE-2023-42678.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42677](https://cve.now/CVE-2023-42677.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42676](https://cve.now/CVE-2023-42676.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42675](https://cve.now/CVE-2023-42675.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42674](https://cve.now/CVE-2023-42674.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42673](https://cve.now/CVE-2023-42673.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42672](https://cve.now/CVE-2023-42672.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-42671](https://cve.now/CVE-2023-42671.md): In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. (no CVSS, Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…)
- [CVE-2023-47701](https://cve.now/CVE-2023-47701.md): IBM Db2 denial of service (CVSS 6.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38003](https://cve.now/CVE-2023-38003.md): IBM Db2 command execution (CVSS 7.2, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-46167](https://cve.now/CVE-2023-46167.md): IBM Db2 denial of service (CVSS 5.9, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2022-46480](https://cve.now/CVE-2022-46480.md): Incorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3 2nd Gen Smart Lock Firmware 02.27.0012 allo (no CVSS)
- [CVE-2023-24046](https://cve.now/CVE-2023-24046.md): An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in th (CVSS 8.8)
- [CVE-2023-24047](https://cve.now/CVE-2023-24047.md): An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via (CVSS 8.0)
- [CVE-2023-24048](https://cve.now/CVE-2023-24048.md): Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via c (CVSS 8.8)
- [CVE-2023-24049](https://cve.now/CVE-2023-24049.md): An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credent (CVSS 9.8)
- [CVE-2023-24050](https://cve.now/CVE-2023-24050.md): Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string w (no CVSS)
- [CVE-2023-24051](https://cve.now/CVE-2023-24051.md): A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute fo (CVSS 8.8)
- [CVE-2023-24052](https://cve.now/CVE-2023-24052.md): An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functiona (CVSS 8.8)
- [CVE-2023-26941](https://cve.now/CVE-2023-26941.md): Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the orig (no CVSS)
- [CVE-2023-26942](https://cve.now/CVE-2023-26942.md): Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the orig (no CVSS)
- [CVE-2023-26943](https://cve.now/CVE-2023-26943.md): Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the orig (no CVSS)
- [CVE-2023-41613](https://cve.now/CVE-2023-41613.md): EzViz Studio v2.2.0 is vulnerable to DLL hijacking. (no CVSS)
- [CVE-2023-48799](https://cve.now/CVE-2023-48799.md): TOTOLINK-X6000R Firmware-V9.4.0cu.852\_B20230719 is vulnerable to Command Execution. (no CVSS)
- [CVE-2023-48800](https://cve.now/CVE-2023-48800.md): In TOTOLINK X6000R\_Firmware V9.4.0cu.852\_B20230719, the shttpd file sub\_417338 function obtains fields from the front-end, connects them thr (no CVSS)
- [CVE-2023-48815](https://cve.now/CVE-2023-48815.md): kkFileView v4.3.0 is vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-48863](https://cve.now/CVE-2023-48863.md): SEMCMS 3.9 is vulnerable to SQL Injection. (CVSS 7.5)
- [CVE-2023-48866](https://cve.now/CVE-2023-48866.md): A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/ob (no CVSS)
- [CVE-2023-48910](https://cve.now/CVE-2023-48910.md): Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. (CVSS 9.8, io.github.microcks:microcks)
- [CVE-2023-48965](https://cve.now/CVE-2023-48965.md): An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download (no CVSS)
- [CVE-2023-48966](https://cve.now/CVE-2023-48966.md): An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary c (no CVSS, zoujingli/thinkadmin)
- [CVE-2023-48967](https://cve.now/CVE-2023-48967.md): Ssolon \<= 2.6.0 and \<=2.5.12 is vulnerable to Deserialization of Untrusted Data. (no CVSS, org.noear:solon)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.