Archive
7 November 2023
Vulnerabilities first published on this day (UTC), newest first.
95 results · Clear filters · Feed
-
Medium 4.3CVE-2023-41723 EPSS 13%
A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:…
-
Medium 6.6
Buffer Over-read in WLAN HOST
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.
-
Medium 6.7
Buffer Copy without Checking Size of Input in Audio
Memory corruption while processing audio effects.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling command through WMI interfaces.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL when reception status handler is called.
-
Medium 6.1
Buffer Over-read in WLAN HAL
Information disclosure in WLAN HAL while handling the WMI state info command.
-
Medium 6.1
Buffer Over-read in IOE Firmware
Information disclosure in IOE Firmware while handling WMI command.
-
Medium 6.1
Buffer Over-read in Qualcomm IPC
Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.
-
Medium 6.1
Buffer Over-read in WLAN Host
Information Disclosure in WLAN Host when processing WMI event command.
-
Medium 5.5
The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…
-
Medium 4.6
Improper Access Control in microweber/microweber
Improper Access Control in GitHub repository microweber/microweber prior to 2.0.
-
Medium 5.5
Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a deni…
-
Medium 6.1CVE-2023-46998 Public exploit
Bootbox.js Cross Site Scripting vulnerability
Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.
-
Medium 6.1
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary cod…
-
Medium 5.3CVE-2023-47102 Public exploit
UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a userna…