Archive
28 June 2023
Vulnerabilities first published on this day (UTC), newest first.
160 results · Feed
-
Unscored —
A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (D…
-
Unscored —
A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (Do…
-
Unscored —
A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Serv…
-
Unscored —
An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 fo…
-
Unscored —
PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS).
-
Unscored —
A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service…
-
Unscored —
Chemex through 3.7.1 is vulnerable to arbitrary file upload.
-
Unscored —
A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (Do…
-
Unscored —
Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.
-
Unscored —
PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course.
-
Unscored —
Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupR…
-
Unscored —CVE-2023-33592 Public exploit
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-l…
-
Critical 9.8
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
-
High 8.8
D-Link DSL-224 firmware version 3.0.10 post authentication command execution
D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.
-
Critical 9.8
D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass
D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.
-
Medium 5.5
An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the …
-
Unscored —
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not c…
-
Medium 5.5
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local us…
-
Medium 5.5
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a…
-
Medium 4.7
A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevan…
-
Medium 4.7
Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the sy…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulne…
-
Unscored —
A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information …
-
Unscored —
In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalat…
-
Unscored —
In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits d…
-
Unscored —
In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. …
-
Unscored —
In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without res…
-
Medium 4.4
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted application…
-
Unscored —
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Unscored —
In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could le…
-
Unscored —
In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could l…
-
Unscored —
In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Medium 6.1
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to man…
-
Unscored —
In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead…
-
Unscored —
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Unscored —
In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bound…
-
Unscored —
In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check.…