Skip to content
OpenAdvisories

Archive

4 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /4 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-3504

    SmartWeb Infotech Job Board My Profile Page account unrestricted upload

    A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /settings/account of the component My Profile Page. The manipulation of the argument filename leads to un…

    SmartWeb Infotech Job Board
  • Medium 6.3
    CVE-2023-3503

    SourceCodester Shopping Website insert-product.php unrestricted upload

    A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation leads to unrestricted upload. The attack can be launc…

    SourceCodester Shopping Website
  • Medium 6.3
    CVE-2023-3502

    SourceCodester Shopping Website search-result.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Shopping Website 1.0. Affected is an unknown function of the file search-result.php. The manipulation of the argument product leads to sql injection. It is possible to launch the a…

    SourceCodester Shopping Website
  • Medium 6.5
    CVE-2023-2974

    Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol

    A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.http.ssl.protocols is not enforced, and the client can force the selection of the weaker supported TLS protocol.

    Red Hat Red Hat build of Quarkus 2.13.8.Final io.quarkus:quarkus-core Maven
  • Medium 6.6
    CVE-2023-21641

    Permissions, Privileges, and Access Controls in Display

    An app with non-privileged access can change global system brightness and cause undesired system behavior.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21640

    Buffer Copy Without Checking Size of Input in Linux

    Memory corruption in Linux when the file upload API is called with parameters having large buffer.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21639

    Buffer Copy Without Checking the Size of Input in Audio

    Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21638

    Incorrect Type Conversion or Cast in Video

    Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21637

    Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux

    Memory corruption in Linux while calling system configuration APIs.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21635

    Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

    Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-21633

    Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux

    Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

    Qualcomm Snapdragon
  • Medium 6.8
    CVE-2023-21629

    Double Free in Modem

    Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

    Qualcomm Snapdragon
  • Medium 6.2
    CVE-2023-21624

    Information Exposure in DSP Services

    Information disclosure in DSP Services while loading dynamic module.

    Qualcomm Snapdragon