Skip to content
OpenAdvisories

Archive

24 March 2023

Vulnerabilities first published on this day (UTC), newest first.

202 results · Feed

  • Medium 5.5

    A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the…

  • Medium 5.3

    Absolute Path Traversal in mlflow/mlflow

    Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.

  • Critical 9.3
    CVE-2023-1177 Public exploit Scanner template EPSS 70%

    Path Traversal: '\..\filename' in mlflow/mlflow

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

  • Medium 6.5

    Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object…

  • High 8.8

    Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg.

  • Medium 5.4

    SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the…

  • High 7.5

    Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request.

  • Critical 9.8

    DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability.

  • Medium 4.4

    In _ufdt_output_node_to_fdt of ufdt_convert.c, there is a possible out of bounds read due to a heap buffer overflow. Th…

  • Medium 6.7

    In lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could l…

  • Unscored —

    In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This …

  • High 7.8

    In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…

  • Unscored —

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…

  • Medium 4.4

    In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. This…

  • High 7.5

    In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. …

  • Medium 6.7

    In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. This could lead to local escalati…

  • Medium 6.7

    In load_png_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. Thi…

  • High 7.2

    In EUTRAN_LCS_ConvertLCS_MOLRReq of LPP_CommonUtil.c, there is a possible out of bounds write due to a logic error in t…

  • Low 3.7

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • Medium 4.4

    In multiple locations of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This coul…

  • High 7.8

    In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a mi…

  • Medium 6.7

    In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. This could lead to…

  • High 7.8

    In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. This could lead …

  • Medium 6.7

    In setToExternal of ril_external_client.cpp, there is a possible out of bounds write due to a missing bounds check. Thi…

  • Medium 6.4

    In dit_hal_ioctl of dit.c, there is a possible use after free due to a race condition. This could lead to local escalat…

  • Medium 6.7

    In dwc3_exynos_clk_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. This…

  • Unscored —

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…

  • Medium 4.4

    In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. This cou…

  • Unscored —

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead…

  • Unscored —

    In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a …

  • Medium 5.5

    In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts inst…

  • Medium 6.7

    In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. This c…

  • Medium 4.4

    In ConvertToHalMetadata of aidl_utils.cc, there is a possible out of bounds read due to a missing bounds check. This co…

  • Critical 9.8

    In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check…

  • Medium 5.5

    In ih264e_init_proc_ctxt of ih264e_process.c, there is a possible out of bounds read due to a heap buffer overflow. Thi…

  • Medium 6.7

    In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could…

  • Unscored —

    In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation…

  • Unscored —

    In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could…

  • High 7.8

    In buildCommand of bluetooth_ccc.cc, there is a possible out of bounds write due to a logic error in the code. This cou…

  • Unscored —

    In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check. …