Archive
2 May 2023
Vulnerabilities first published on this day (UTC), newest first.
27 results · Clear filters · Feed
-
High 8.8
Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced…
-
High 7.5CVE-2023-30861 Public exploit
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…
-
High 8.8
Advanced Custom Fields - Contributor+ PHP Object Injection
The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is p…
-
High 8.8CVE-2023-32007 EPSS 76%
Apache Spark: Shell command injection via Spark UI
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If AC…
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.
-
High 7.3
Buffer over-read in Trusted Execution Environment
Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.
-
High 7.2CVE-2023-1669 EPSS 18%
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
-
High 7.5
Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary password-protected package files.
-
High 7.2
Zyrex Popup <= 1.0 - Admin+ Arbitrary File Upload
The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Administrator) to upload arbitrary files, even when modifying the file system is disallowed, such as i…
-
High 8.4
Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics
Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
-
High 8.4
Incorrect Type Conversion or Cast in Graphics
Memory corruption in Graphics while importing a file.
-
High 8.4
Improper Access Control in HAB Memory Management
Memory corruption in HAB Memory management due to broad system privileges via physical address.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is not supported.
-
High 8.2
Buffer over-read in Modem
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.
-
High 7.5
Reachable assertion in Modem
Transient DOS due to reachable assertion in Modem during OSI decode scheduling.
-
High 7.5
Null pointer dereference in Modem
Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.
-
High 7.5
NULL pointers dereference in Modem
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.
-
High 7.8
Use after free in Qualcomm IPC
Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.
-
High 7.8
Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive
Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exporting a shared key.
-
High 8.1CVE-2023-31435 Public exploit
Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire …
-
High 8.8CVE-2023-31433 Public exploit
A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated att…
-
High 7.5CVE-2023-30403 EPSS 14%
An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows…
-
High 8.8
European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server S…
-
High 7.5
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read cert…
-
High 7.5
3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 fi…
-
High 8.8
In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to e…
-
High 8.8
A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to e…