Archive

7 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /7 April 2023 →

All Critical High Medium Low Exploited only Public exploit

170 results · Feed

High 8.8

CVE-2023-1241

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
High 8.0

CVE-2023-1240

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Critical 9.3

CVE-2023-1244

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
High 7.6

CVE-2023-1238

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Low 3.4

CVE-2023-1237

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Low 3.5

CVE-2023-1245

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
High 8.0

CVE-2023-1242

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Medium 6.6

CVE-2023-1264

NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi

Mar 7, 2023
Medium 6.0

CVE-2023-1239

Cross-site Scripting (XSS) - Reflected in answerdev/answer

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Medium 6.0

CVE-2023-1243

Cross-site Scripting (XSS) - Stored in answerdev/answer

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

answerdev answerdev/answer github.com/answerdev/answer Go

Mar 7, 2023
Critical 9.8

CVE-2023-24781

SQL Injection in Funadmin

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.

funadmin/funadmin Packagist

Mar 7, 2023
Critical 9.8

CVE-2023-24775 Public exploit EPSS 20%

SQL Injection in Funadmin

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

funadmin/funadmin Packagist

Mar 7, 2023
Critical 9.8

CVE-2023-24780

SQL Injection in Funadmin

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.

funadmin/funadmin Packagist

Mar 7, 2023
High 8.8

CVE-2023-23554

Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_iv…

IVM Development Group pg_ivm

Mar 7, 2023
Unscored —

CVE-2023-25230

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary re…

Mar 7, 2023
High 7.2

CVE-2023-25223

CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.

Mar 7, 2023
Medium 4.3

CVE-2023-22847

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materializ…

IVM Development Group pg_ivm

Mar 7, 2023
Medium 5.4

CVE-2023-26954

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group modul…

Mar 7, 2023
Unscored —

CVE-2023-26955

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group modu…

Mar 7, 2023
Medium 4.8

CVE-2023-26953

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrato…

Mar 7, 2023
Medium 6.7

CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6885, MT6893, MT6895, MT6983, MT8167, MT8168, MT8666, MT8675

Mar 7, 2023
Medium 6.7

CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…

MediaTek MT6895, MT6985, MT8168, MT8781

Mar 7, 2023
Medium 6.7

CVE-2023-20627

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat…

MediaTek MT6879, MT6895, MT6983, MT8167, MT8168

Mar 7, 2023
Medium 6.7

CVE-2023-20639

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797

Mar 7, 2023
Unscored —

CVE-2023-20621

In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …

MediaTek MT6739, MT6761, MT6762, MT6765, MT6771, MT6789, MT6879, MT6883, MT6885, MT6893, MT6895, MT6983

Mar 7, 2023
Medium 4.4

CVE-2023-20649

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…

MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT688

Mar 7, 2023
Medium 4.4

CVE-2023-20635

In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local informat…

MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, M

Mar 7, 2023
Medium 6.7

CVE-2023-20642

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797

Mar 7, 2023
Medium 6.7

CVE-2023-20640

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6879, MT6895, MT6983, MT8791, MT8791T, MT8797

Mar 7, 2023
Medium 4.4

CVE-2023-20647

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…

MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8765, MT8766

Mar 7, 2023
Medium 4.4

CVE-2023-20646

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…

MediaTek MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873,

Mar 7, 2023
Medium 6.7

CVE-2023-20628

In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of …

MediaTek MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT689

Mar 7, 2023
Medium 6.7

CVE-2023-20637

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797

Mar 7, 2023
Medium 6.7

CVE-2023-20634

In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalat…

MediaTek MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT876

Mar 7, 2023
Medium 4.4

CVE-2023-20648

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…

MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT688

Mar 7, 2023
Medium 6.7

CVE-2023-20641

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6879, MT6895, MT6983, MT8791, MT8791T, MT8797

Mar 7, 2023
Medium 6.7

CVE-2023-20643

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6891, MT6893, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791

Mar 7, 2023
Medium 6.7

CVE-2023-20630

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…

MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6885, MT6893, MT6895, MT6983, MT8167, MT8168, MT8666, MT8675

Mar 7, 2023
Unscored —

CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privi…

MediaTek MT6879, MT6895, MT6983

Mar 7, 2023
Medium 4.4

CVE-2023-20651

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc…

MediaTek MT6853, MT6853T, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8195Z

Mar 7, 2023