Archive
19 December 2023
Vulnerabilities first published on this day (UTC), newest first.
119 results · Feed
-
Critical 9.8CVE-2023-46220 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
High 7.2CVE-2023-46263 EPSS 82%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…
-
High 7.5
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46217 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46259 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
High 7.5CVE-2023-46262 EPSS 83%
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) …
-
Critical 9.8CVE-2023-46257 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Medium 6.5
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Req…
-
Critical 9.8CVE-2023-46261 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46216 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
High 7.2CVE-2023-46264 EPSS 90%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…
-
High 7.3
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
High 7.5
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
High 7.5
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-46225 EPSS 11%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
Critical 9.8CVE-2023-41727 EPSS 36%
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could …
-
High 7.3CVE-2021-22962 EPSS 91%
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
High 7.5
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out…
-
Medium 5.4
WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control
Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress.This issue affects GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in Wor…
-
Medium 6.5
WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files (Manual, Auto & AI).This issue affects Media File Renamer: Rename Files (Manual, Auto & AI): from n/a through 5.6.9.
-
Medium 5.3
WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data Exposure
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affects Aruba HiSpeed Cache: from n/a through 2.0.6.
-
High 8.1
When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could acce…
-
High 7.2
XML External Entity Reference on 52North WPS
An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. This vulnerability allows the use of external entities in its WebProcessingService servlet for an attacker to retrieve files by making HTTP …
-
Medium 5.9
Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions lis…
-
High 8.1
Session Hijacking on Imou Life app
A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new devi…
-
High 7.4CVE-2023-1514 Public exploit
A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the s…
-
High 7.8
Use-after-free in Linux kernel's ipv4: igmp component
A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege escalation. A race condition can be exploited to cause a timer be mistakenly registered on a RCU read locked object which is freed by another…
-
High 7.8CVE-2023-6931 Public exploit
Out-of-bounds write in Linux kernel's Performance Events system component
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perf_event's read_size can overflow, leading to an heap out-of-bounds increment or write in perf_read_…
-
Unscored —
Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that …
-
Unscored —
Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of user…
-
Unscored —
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler…
-
Unscored —
Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications display…
-
Medium 6.5
A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow un…
-
Unscored —
In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager sub…
-
Unscored —
The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking de…