Archive
October 2023
Vulnerabilities first published in this month (UTC), newest first.
1,017 results · Clear filters · Feed
-
Medium 6.7
In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p…
-
Medium 6.7
In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv…
-
Medium 6.7
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to loc…
-
Medium 6.7
In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to loc…
-
Medium 6.7
In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege wit…
-
Medium 6.7
In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote …
-
Medium 4.3
Field Logic DataCube4 Web API improper authentication
A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit has been disclosed …
-
Medium 5.3
pretix potential IP address spoofing vulnerability
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the…
-
Medium 6.1CVE-2023-44012 Scanner template
Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the h…
-
Medium 6.3
SATO CL4NX-J Plus Cookie improper authentication
A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The manipulation with the input auth=user,level1,settings; web=true leads to improper authentication. Acce…
-
Medium 6.3
SATO CL4NX-J Plus WebConfig improper authentication
A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be d…
-
Medium 4.3CVE-2023-5324 Public exploit
eeroOS Ethernet Interface denial of service
A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local n…
-
Medium 5.5CVE-2023-4211 Exploited
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
KEV Oct 3, 2023 -
Medium 4.7CVE-2023-5322 EPSS 17%
D-Link DAR-7000 edit_manageadmin.php sql injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/edit_manageadmin.php. The manipulation of the argument id l…
-
Medium 5.4
Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr
Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.