Archive
8 November 2023
Vulnerabilities first published on this day (UTC), newest first.
111 results · Feed
-
High 7.5
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause …
-
High 7.5
Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause …
-
High 7.5
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC av…
-
High 7.5
Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC av…
-
Unscored —
Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable val…
-
High 7.5
Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vul…
-
High 7.5
Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service conf…
-
High 7.5
Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may af…
-
Unscored —
Incorrect libcap_net limitation list manipulation
In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names wa…
-
Unscored —
libc stdio buffer overflow
In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE objects' write space members for write-buffered streams when the write(2) syste…
-
High 8.8
Apache UIMA Java SDK Core, Apache UIMA Java SDK CPE, Apache UIMA Java SDK Vinci adapter, Apache UIMA Java SDK tools: Potential untrusted code execution when deserializing certain binary CAS formats
Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK.This issue affects Apache UIMA Java SDK: before 3.5.0. Users are recommended to upgrade to ver…
-
Low 3.5
Samsung Smart TV UE40D7000 WPS DoS attack
Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools.
-
High 7.5
Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerabili…
-
High 7.5
Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prev…
-
Unscored —
Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect avail…
-
Unscored —
Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to per…
-
Unscored —
Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulner…
-
Medium 6.5
Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor
A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitiv…
-
Critical 9.8
An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirem…
-
High 7.5
Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.
-
Unscored —
jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512.
-
Unscored —
jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.c…
-
Medium 5.4
Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a craf…
-
High 7.5
An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node…
-
Medium 6.5CVE-2023-45857 Public exploit
Axios Cross-Site Request Forgery Vulnerability
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.
-
High 7.1
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, …
-
High 7.1
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, …
-
Unscored —CVE-2023-37790 Public exploit
Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Prof…
-
Medium 5.4
Microweber Cross-site Scripting vulnerability
Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.
-
Critical 9.8
WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.
-
Critical 9.9CVE-2021-43609 Public exploit
An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within…