Archive
June 2023
Vulnerabilities first published in this month (UTC), newest first.
2,424 results · Feed
-
Unscored —CVE-2023-33592 Public exploit
Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-l…
-
Critical 9.8
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts
-
High 8.8
D-Link DSL-224 firmware version 3.0.10 post authentication command execution
D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.
-
Critical 9.8
D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass
D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.
-
Medium 5.5
An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the …
-
Unscored —
A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not c…
-
Medium 5.5
A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local us…
-
Medium 5.5
A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a…
-
Medium 4.7
A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevan…
-
Medium 4.7
Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails because it lacks a check of the return value of kmalloc(). This issue allows a local user to crash the sy…
-
Medium 6.5
An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulne…
-
Unscored —
A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information …
-
Unscored —
In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalat…
-
Unscored —
In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits d…
-
Unscored —
In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. …
-
Unscored —
In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without res…
-
Medium 4.4
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted application…
-
Unscored —
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Unscored —
In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could le…
-
Unscored —
In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could l…
-
Unscored —
In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Medium 6.1
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to man…
-
Unscored —
In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead…
-
Unscored —
In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local infor…
-
Unscored —
In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bound…
-
Unscored —
In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check.…
-
Unscored —
In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a…
-
Unscored —
In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead t…
-
Unscored —
In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to loca…
-
Unscored —
In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due t…
-
Unscored —
In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due …
-
Unscored —
In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds…
-
Unscored —
In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds chec…
-
Unscored —
In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due …
-
Unscored —
In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods …
-
Unscored —
In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could le…
-
Unscored —
In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the …
-
Unscored —
In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This coul…