Archive
June 2023
Vulnerabilities first published in this month (UTC), newest first.
854 results · Clear filters · Feed
-
Medium 4.3
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited am…
-
Medium 4.4
In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 6.2
Untrusted Pointer Dereference in Core
Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.
-
Medium 5.5
Uncontrolled resource consumption in Linux kernel
Transient DOS due to uncontrolled resource consumption in Linux kernel when malformed messages are sent from the Gunyah Resource Manager message queue.
-
Medium 6.7
Improper restriction of operations within the bounds of memory buffer in Linux
Memory corruption in Linux while sending DRM request.
-
Medium 6.7
Use after free in Core
Memory corruption due to use after free in Core when multiple DCI clients register and deregister.
-
Medium 6.7
Incorrect type conversion or cast in Audio
Memory corruption in Audio due to incorrect type cast during audio use-cases.
-
Medium 6.7
Buffer copy without checking the size of input in FM Host
Memory corruption in FM Host due to buffer copy without checking the size of input in FM Host
-
Medium 6.7
Double free in Linux-Android
Memory corruption in Linux android due to double free while calling unregister provider after register call.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption due to buffer copy without checking the size of input in Core while processing ioctl commands from diag client applications.
-
Medium 6.7
Buffer copy without checking the size of input in Core
Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries.
-
Medium 5.5
In email service, there is a missing permission check. This could lead to local information disclosure with no addition…
-
Medium 5.5
In email service, there is a missing permission check. This could lead to local information disclosure with no addition…
-
Medium 5.5
In telephony service, there is a missing permission check. This could lead to local information disclosure with no addi…
-
Medium 5.5
In dialer service, there is a missing permission check. This could lead to local information disclosure with no additio…
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 5.9
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 6.2
In dialer service, there is a possible missing permission check. This could lead to local denial of service with no add…
-
Medium 4.4
In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni…
-
Medium 5.5
In telephony service, there is a possible missing permission check. This could lead to local denial of service with no …
-
Medium —
trust-dns vulnerable to Remote Attackers causing Denial-of-Service (packet loops) with crafted DNS packets
trust-dns and trust-dns-server are vulnerable to remotely triggered denial-of-service attacks, consuming both network and CPU resources. DNS messages with the QR=1 bit set are responded to with a `FormErr` response. This allows creating a traffic loop, in whi…
-
Medium 4.3
RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgery
A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. This affects the function install_new_favicon of the file admin/class-favicon-by-realfavicongenerator-admin.php. The manipulation leads …
-
Medium 4.3CVE-2023-0921 EPSS 84%
Allocation of Resources Without Limits or Throttling in GitLab
A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturat…
-
Medium 6.5
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and …
-
Medium 6.5CVE-2023-33477 Public exploit
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special p…
-
Medium 5.5
axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. …
-
Medium 6.5
An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.5, all versions starti…
-
Medium 4.6
The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused acro…
-
Medium 6.5
distribution catalog API endpoint can lead to OOM via malicious user input
A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This vulnerability allows a malicious user to submit an unreasonably large value for…
-
Medium 5.5
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashi…
-
Medium 4.3
Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosure
A vulnerability, which was classified as problematic, has been found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this issue is some unknown functionality of the file wordpress-exit-box-lite.php. The manipulation leads to information disclosur…
-
Medium 6.7
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could a…
-
Medium 6.7
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacke…
-
Medium 4.3
Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery
A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the file wordpress-exit-box-lite.php. The manipulation leads to cross-site request forgery. The…