Archive
28 June 2023
Vulnerabilities first published on this day (UTC), newest first.
160 results · Feed
-
Unscored —
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to …
-
Unscored —
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. T…
-
Unscored —
In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin …
-
Unscored —
In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. Th…
-
Unscored —
In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS serv…
-
Unscored —
In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validat…
-
Unscored —
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could le…
-
Unscored —
In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missi…
-
Unscored —
In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to…
-
Unscored —
In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to loc…
-
Low 2.4
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to r…
-
Unscored —
In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. Th…
-
Unscored —
In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interac…
-
Unscored —
In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to …
-
Unscored —
In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This c…
-
Unscored —
In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. T…
-
Unscored —CVE-2023-21173 Public exploit
In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due t…
-
Medium 6.2CVE-2023-21237 Exploited
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification…
KEV Mar 5, 2024 -
Unscored —
In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo…
-
Unscored —
In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserializa…
-
Unscored —
In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. T…
-
Unscored —
In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This c…
-
Unscored —
D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActio…
-
High 8.6
A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Sof…
-
Critical 9.6
A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communicat…
-
Medium 6.1
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager,…
-
Medium 4.8
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Bu…
-
High 7.5
A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service…
-
Medium 5.4
Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Secu…
-
High 7.8CVE-2023-20178 Public exploit
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco …
-
Medium 6.8
A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) an…
-
Medium 5.4
Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, formerly Cisco Email Security Appliance (ESA); and Cisco Secure Web Appliance, formerly Cisco Web Secu…
-
Medium 4.3
A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileg…
-
Medium 6.2
Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability
A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypass secondary authentication and access an affected macOS device. This vulnerability is due to the incorrect handling of responses from Cisc…
-
Critical 9.6
Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities
Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write crede…
-
Medium 6.4
An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4…
-
Unscored —CVE-2022-44276 Public exploit
In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.
-
Unscored —
In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay a…
-
Unscored —
Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-addre…
-
Unscored —
Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to …