Archive
August 2023
Vulnerabilities first published in this month (UTC), newest first.
2,514 results · Feed
-
High 7.4
A remote code execution vulnerability in the webview component
A remote code execution vulnerability in the webview component of OnePlus Store app.
-
High 8.8
Command injection via active checks and REST API
Improper neutralization of active check command arguments in Checkmk < 2.1.0p32, < 2.0.0p38, < 2.2.0p4 leads to arbitrary command execution for authenticated users.
-
High 8.8
Absolute Privacy <= 2.1 - Cross-Site Request Forgery to User Email/Password Change
The Absolute Privacy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing nonce validation on the 'abpr_profileShortcode' function. This makes it possible for unauthenticated attackers …
-
High 8.8
Realia <= 1.4.0 - Cross-Site Request Forgery to User Email Change
The Realia plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.0. This is due to missing nonce validation on the 'process_change_profile_form' function. This makes it possible for unauthenticated attackers to…
-
Medium 6.8
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access pri…
-
Low 3.8
Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access dow…
-
Low 3.3
Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitiv…
-
Medium 6.7
Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/1…
-
Medium 4.7
PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file …
-
Medium 5.3
PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local…
-
High 7.5
Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows co…
-
Medium 5.5
Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect B…
-
Medium 4.4
An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker…
-
Medium 4.4
An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cau…
-
Medium 6.7
Out-of-bounds Write vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update …
-
Medium 6.7
Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to exe…
-
Medium 6.7
Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local …
-
High 8.4
Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.
-
Medium 6.7
Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local a…
-
Medium 6.7
Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execut…
-
Medium 6.7
Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitr…
-
Medium 6.7
Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitr…
-
Medium 4.3
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY m…
-
Medium 4.3
Improper access control in Samsung Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call acceptRinging…
-
Medium 4.3
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without p…
-
Medium 4.3
Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call silenceRinger API wit…
-
Medium 4.4
An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release …
-
High 8.4
Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with priv…
-
High 7.8
Improper access control in HDCP trustlet prior to SMR Aug-2023 Release 1 allows local attackers to execute arbitrary co…
-
Medium 6.7
Improper access control vulnerability in SLocationService prior to SMR Aug-2023 Release 1 allows local attacker to upda…
-
Unscored —
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
-
Unscored —
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
-
Unscored —
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via upl…
-
Medium 6.1
Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.
-
Unscored —
An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers fro…
-
Unscored —
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.…
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.p…
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Document Creat…
-
Unscored —
There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creat…
-
Unscored —
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Request…