Skip to content
OpenAdvisories

Archive

2 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /2 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-48418

    User Build misconfiguration resulting in local escalation of privilege

    In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to local escalation of privilege with no additional     execution privileges neede…

    Google Pixel Watch
  • Critical 10.0
    CVE-2023-6339

    Google Nest WiFi Pro root code-execution & user-data compromise

    Google Nest WiFi Pro root code-execution & user-data compromise

    Google Wifi Pro
  • Critical 9.8
    CVE-2024-21623

    Arbitrary Expression Injection in github workflow leads to Command execution & leaking secrets

    OTCLient is an alternative tibia client for otserv. Prior to commit db560de0b56476c87a2f967466407939196dd254, the /mehah/otclient "`Analysis - SonarCloud`" workflow is vulnerable to an expression injection in Actions, allowing an attacker to run commands remo…

    mehah otclient
  • Critical 10.0
    CVE-2023-48419

    An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP

    An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege 

    Google Google Nest Mini
  • Critical 9.3
    CVE-2023-4280

    Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region

    An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region.

    silabs.com GSDK
  • Critical 9.8
    CVE-2023-6436

    SQLi in Ekol Bilisim Website Template

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection. This issue affects Website Template: through 20231215.

    Ekol Informatics Website Template
  • Critical 9.3
    CVE-2023-33032

    Integer Overflow or Wraparound in TZ Secure OS

    Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.

    Qualcomm Snapdragon
  • Critical 9.3
    CVE-2023-33030

    Buffer Copy without Checking Size of Input in HLOS

    Memory corruption in HLOS while running playready use-case.

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2023-33025

    Buffer Copy without Checking Size of Input in Data Modem

    Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2023-32874

    In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote co…

    MediaTek MT2735, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT
  • Critical 9.8
    CVE-2023-47458

    An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions …