Archive
5 September 2023
Vulnerabilities first published on this day (UTC), newest first.
123 results · Feed
-
High 7.8
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Memory Corruption in Core Platform while printing the response buffer in log.
-
Medium 6.7
Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display
Memory Corruption while accessing metadata in Display.
-
High 7.8
Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform
Memory corruption in Core Platform while printing the response buffer in log.
-
Medium 6.7
Integer Overflow or Wraparound in Display
Memory corruption in Audio while validating and mapping metadata.
-
Medium 6.7
Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio
Memory corruption in Audio during playback session with audio effects enabled.
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while processing RRC reconfiguration message.
-
High 7.5
Reachable Assertion in Modem
Transient DOS in Modem while processing invalid System Information Block 1.
-
Medium 6.7
Integer Overflow to Buffer Overflow in RIL
Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
-
Medium 6.7
Improper Validation of Array Index in Linux
Memory Corruption due to improper validation of array index in Linux while updating adn record.
-
High 8.4
Improper Validation of Array Index in Audio
Memory corruption due to improper validation of array index in Audio.
-
Medium 6.7
Buffer over-read in Modem
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.
-
High 8.4
Improper validation of array index in WLAN HAL
Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.
-
Medium 5.1
Buffer over-read in Automotive multimedia
Information disclosure in Automotive multimedia due to buffer over-read.
-
Medium 6.3
Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal
A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The …
-
Medium 4.4CVE-2023-4636 Public exploit
WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
-
Medium 5.3
IBM Aspera Faspex security bypass
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649.
-
Medium 5.9
IBM Aspera Faspex information disclosure
IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID: 244121.
-
Medium 5.1
IBM Sterling Secure Proxy information disclosure
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequate memory clearing during operations. IBM X-Force ID: 252139.
-
Unscored —
BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.
-
Unscored —
Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
-
Unscored —
Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
-
Unscored —
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by a…
-
Unscored —
Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the un…
-
Medium 5.4
A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execut…
-
Unscored —CVE-2023-39598 Scanner template
Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitr…
-
Unscored —
abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.s…
-
Unscored —
Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter a…
-
Low —CVE-2023-36308 Public exploit
Crash when processing crafted TIFF files
disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this …
-
Critical 9.8
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.
-
Medium 5.5
Index out of bounds leading to crash
ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security conseq…
-
Unscored —
KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin r…
-
Unscored —
An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malforme…
-
Unscored —
TEF portal 2023-07-17 is vulnerable to authenticated remote code execution.
-
Unscored —
TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack.
-
Unscored —
Cerebrate before 1.15 lacks the Secure attribute for the session cookie.
-
Unscored —
An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to ex…
-
Unscored —
File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted s…
-
Unscored —CVE-2023-41508 Public exploit
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.
-
Unscored —
An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a ma…
-
Unscored —CVE-2023-41507 Public exploit
Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component…