CVE-2023 records published in December 2023
Page three of three: records 2,001 to 2,568 of the 2,568 published in December 2023, newest first. The first page carries the figures for December 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-48826 | PHP Jabbers Time Slots Booking Calendar CSV injection | 8.8v3.1 | 1.2% | 2023-12-07 | |
| CVE-2023-48825 | PHP Jabbers Availability Booking Calendar cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-48824 | BoidCMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-48823 | Mayuri K Courier Management System ajax.php in GaatiTrack blind SQL injection | 9.8v3.1 | 1.1% | 2023-12-07 | |
| CVE-2023-48325 | Landing Page Builder WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-48208 | PHP Jabbers Availability Booking Calendar cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-48207 | PHP Jabbers Availability Booking Calendar CSV injection | 8.8v3.1 | 1.2% | 2023-12-07 | |
| CVE-2023-48206 | Mayuri K Courier Management System GaatiTrack cross-site scripting | 6.1v3.1 | 0.6% | 2023-12-07 | |
| CVE-2023-48205 | Jorani Leave Management System injection | 5.3v3.1 | 0.8% | 2023-12-07 | |
| CVE-2023-48172 | PHP Jabbers Shuttle Booking Software cross-site scripting | 5.4v3.1 | 0.7% | 2023-12-07 | |
| CVE-2023-47779 | Integration for Contact Form 7 and Constant Contact WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-47548 | Integrate Google Drive WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-47440 | Directory traversal in Gladys Assistant | 6.5v3.1 | 1.0% | 2023-12-07 | |
| CVE-2023-46974 | Mayuri K Courier Management System Best cross-site scripting | 5.4v3.1 | 0.7% | 2023-12-07 | Exploit code |
| CVE-2023-46916 | Maximawatches Max Pro Power BLE GATT interface vulnerability | 4.3v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-46871 | GPAC MP4Box memory leak | 5.3v3.1 | 0.7% | 2023-12-07 | |
| CVE-2023-46857 | squidex cross-site scripting | 5.4v3.1 | 0.6% | 2023-12-07 | Fix |
| CVE-2023-46693 | Forma LMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-46641 | 12 Step Meeting List WordPress plugin server side request forgery (SSRF) | 5.4v3.1 | 0.3% | 2023-12-07 | Fix |
| CVE-2023-46307 | Buddho Etcd Browser path traversal | 7.5v3.1 | 1.3% | 2023-12-07 | |
| CVE-2023-46218 | curl case sensitivity bypass | 6.5v3.1 | 1.7% | 2023-12-07 | Fix |
| CVE-2023-45762 | Responsive Column Widgets WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-07 | |
| CVE-2023-43304 | Linecorp line authentication bypass by spoofing | 8.2v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-43303 | Line craftbeer bar canvas mini-app information disclosure | 8.2v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-43302 | Line sanTas mini-app information disclosure | 8.2v3.1 | 0.6% | 2023-12-07 | |
| CVE-2023-43301 | Linecorp line code injection | 8.2v3.1 | 0.6% | 2023-12-07 | |
| CVE-2023-43300 | Line urban_project mini-app information disclosure | 8.2v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-43299 | Line DA BUTCHERS mini-app information disclosure | 5.3v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-43298 | Line SCOL Members Card mini-app information disclosure | 5.3v3.1 | 0.5% | 2023-12-07 | |
| CVE-2023-43103 | Zimbra Collaboration web endpoint cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-43102 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41913 | strongSwan buffer overflow | 9.8v3.1 | 2.3% | 2023-12-07 | Fix |
| CVE-2023-41905 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41804 | Starter Templates WordPress plugin server side request forgery (SSRF) | 5.4NVD v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41172 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41171 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41170 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41169 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41168 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-41106 | An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3. An attacker can gain access to a Zimbra account. This is also fixed in 9.0.0 Patch 35 and 8.8.15 Patch 42. | 7.5v3.1 | 1.0% | 2023-12-07 | Fix |
| CVE-2023-40302 | Netscout Ngeniuspulse incorrect permission assignment | 9.1v3.1 | 0.8% | 2023-12-07 | Fix |
| CVE-2023-40301 | Netscout Ngeniuspulse command injection | 9.8v3.1 | 1.5% | 2023-12-07 | Fix |
| CVE-2023-40300 | Netscout Ngeniuspulse hard-coded credentials | 9.8v3.1 | 0.7% | 2023-12-07 | Fix |
| CVE-2023-40238 | InsydeH2O cleartext storage of sensitive information | 5.5v3.1 | 1.9% | 2023-12-07 | Fix |
| CVE-2023-39909 | Ericsson Network Manager NCM application improper access control | 8.8v3.1 | 0.8% | 2023-12-07 | |
| CVE-2023-39172 | SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted | 9.1v3.1 | 0.6% | 2023-12-07 | |
| CVE-2023-39171 | SENEC Storage Box V1,V2 and V3 accidentially expose a management interface | 7.2CNA v3.1 | 1.1% | 2023-12-07 | |
| CVE-2023-39169 | SENEC: Storage Box V1,V2 and V3 using default credentials | 9.8CNA v3.1 | 0.9% | 2023-12-07 | |
| CVE-2023-39167 | SENEC: Storage Box V1,V2 and V3 affected by improper access control | 7.5CNA v3.1 | 1.0% | 2023-12-07 | |
| CVE-2023-38174 | Microsoft Edge (Chromium-based) information disclosure | 4.3CNA v3.1 | 2.2% | 2023-12-07 | Fix |
| CVE-2023-36880 | Microsoft Edge (Chromium-based) information disclosure | 4.8CNA v3.1 | 1.6% | 2023-12-07 | Fix |
| CVE-2023-35909 | Ninja Forms WordPress plugin denial of service Attack | 5.3v3.1 | 0.8% | 2023-12-07 | Fix |
| CVE-2023-35618 | Microsoft Edge (Chromium-based) elevation of privilege | 9.6CNA v3.1 | 2.9% | 2023-12-07 | Fix |
| CVE-2023-35039 | Password Reset with Code for WordPress REST API plugin broken authentication | 9.8v3.1 | 1.1% | 2023-12-07 | Fix |
| CVE-2023-33413 | Supermicro B12dpe-6 hard-coded credentials | 8.8v3.1 | 1.0% | 2023-12-07 | Fix |
| CVE-2023-33412 | Supermicro B12dpe-6 arbitrary command execution | 8.8v3.1 | 1.2% | 2023-12-07 | Fix |
| CVE-2023-33411 | Supermicro B12dpe-6 path traversal | 7.5v3.1 | 1.3% | 2023-12-07 | Fix |
| CVE-2023-28017 | HCL Connections is vulnerable to cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-6588 | Devolutions Workspace offline mode vulnerability | 6.5v3.1 | 0.6% | 2023-12-07 | Fix |
| CVE-2023-6581 | D-Link DAR-7000 workidajax.php SQL injection | 9.8v3.1 | 4.0% | 2023-12-07 | |
| CVE-2023-6580 | D-Link DIR-846 QoS POST deserialization | 8.8v3.1 | 2.3% | 2023-12-07 | |
| CVE-2023-6579 | osCommerce POST parameter shopping-cart SQL injection | 9.8v3.1 | 23.8% | 2023-12-07 | |
| CVE-2023-6578 | Software AG WebMethods access control | 6.5NVD v3.1 | 0.7% | 2023-12-07 | |
| CVE-2023-6577 | Byzoro PatrolFlow 2530Pro mailsendview.php path traversal | 4.3v3.1 | 1.2% | 2023-12-07 | |
| CVE-2023-6576 | Byzoro S210 HTTP POST request uploadfile.php unrestricted upload | 8.8v3.1 | 1.4% | 2023-12-07 | |
| CVE-2023-6575 | Byzoro S210 HTTP POST request repair.php SQL injection | 8.8v3.1 | 2.8% | 2023-12-07 | |
| CVE-2023-6574 | Byzoro Smart S20 HTTP POST request updateos.php unrestricted upload | 8.8v3.1 | 1.6% | 2023-12-07 | |
| CVE-2023-6568 | Reflected XSS via Content-Type header in MLflow/MLflow | 6.1v3.1 | 1.7% | 2023-12-07 | NucleiFix |
| CVE-2023-6566 | Business Logic Errors in microweber/microweber | 6.5v3.1 | 0.5% | 2023-12-07 | Fix |
| CVE-2023-6333 | Cross-site scripting in ControlByWeb Relays | 5.4NVD v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-5761 | Burst Statistics WordPress plugin SQL injection | 7.5NVD v3.1 | 0.7% | 2023-12-07 | Fix |
| CVE-2023-5714 | System Dashboard WordPress plugin missing authorization to information disclosure (sd_db_specs) | 4.3v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-5713 | System Dashboard WordPress plugin missing authorization to information disclosure (sd_option_value) | 4.3v3.1 | 0.5% | 2023-12-07 | Fix |
| CVE-2023-5712 | System Dashboard WordPress plugin missing authorization to information disclosure (sd_global_value) | 4.3v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-5711 | System Dashboard WordPress plugin missing authorization to information disclosure (sd_php_info) | 4.3v3.1 | 0.4% | 2023-12-07 | Fix |
| CVE-2023-5710 | System Dashboard WordPress plugin missing authorization to information disclosure (sd_constants) | 4.3v3.1 | 0.5% | 2023-12-07 | Fix |
| CVE-2023-5058 | Phoenix SecureCore™ Technology™ 4 improper input validation | 7.8v3.1 | 0.3% | 2023-12-07 | Fix |
| CVE-2023-4486 | Uncontrolled resource consumption in Metasys and Facility Explorer | 7.5CNA v3.1 | 0.8% | 2023-12-07 | Fix |
| CVE-2023-4122 | Student Information System insecure file upload | 8.8NVD v3.1 | 1.5% | 2023-12-07 | |
| CVE-2023-49897 | FXC AE1021, AE1021PE OS command injection | 8.8v3.1 | 50.4% | 2023-12-06 | KEVEmerging ThreatsFix |
| CVE-2023-49248 | Huawei HarmonyOS vulnerability of unauthorized file access in the settings app | 5.5v3.1 | 0.2% | 2023-12-06 | Fix |
| CVE-2023-49247 | Huawei HarmonyOS permission verification vulnerability in distributed scenarios | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49246 | Huawei HarmonyOS unauthorized access vulnerability in the card management module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49245 | Unauthorized access vulnerability in the Huawei Share module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49244 | Huawei HarmonyOS permission management vulnerability in the multi-user module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49243 | Huawei HarmonyOS vulnerability of unauthorized access to email attachments in the email module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49242 | Huawei HarmonyOS free broadcast vulnerability in the running management module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49241 | Huawei HarmonyOS API permission control vulnerability in the network management module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49240 | Huawei HarmonyOS unauthorized access vulnerability in the launcher module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49239 | Huawei HarmonyOS unauthorized access vulnerability in the card management module | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49096 | Argument injection in FFmpeg codec parameters in Jellyfin | 7.7CNA v3.1 | 1.3% | 2023-12-06 | Fix |
| CVE-2023-48940 | DaiCuo /admin.php stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-06 | |
| CVE-2023-48930 | Rockoa Xinhu unrestricted file upload | 9.8v3.1 | 1.2% | 2023-12-06 | |
| CVE-2023-48859 | TOTOLINK A3002RU incorrect authorization | 8.8v3.1 | 1.2% | 2023-12-06 | |
| CVE-2023-48849 | Ruijie RG-EG1000C arbitrary code execution | 9.8v3.1 | 1.3% | 2023-12-06 | Exploit code |
| CVE-2023-48123 | Netgate pfSense Plus arbitrary code execution | 8.8v3.1 | 67.8% | 2023-12-06 | Exploit codeFix |
| CVE-2023-46773 | Huawei HarmonyOS permission management vulnerability in the PMS module | 9.8v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-46751 | Artifex Ghostscript use-after-free | 7.5v3.1 | 1.5% | 2023-12-06 | Fix |
| CVE-2023-46688 | Implem Pleasanter open redirect | 6.1v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-46354 | Myprestamodules Orders (csv, Excel) Export Pro missing authorization | 7.5v3.1 | 0.6% | 2023-12-06 | |
| CVE-2023-46353 | MyPresta Product Tag Icons Pro SQL injection | 9.8v3.1 | 0.8% | 2023-12-06 | |
| CVE-2023-45285 | Command go get may unexpectedly fallback to insecure git in cmd/go | 7.5v3.1 | 1.1% | 2023-12-06 | Fix |
| CVE-2023-45210 | Implem Pleasanter improper access control | 4.3v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-44113 | Huawei HarmonyOS missing authorization | 7.5v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-44099 | Huawei HarmonyOS vulnerability of data verification errors in the kernel module | 7.5v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-41268 | Samsung Open Source Escargot possible stack overflow due to insufficient input validation | 5.3CNA v3.1 | 0.7% | 2023-12-06 | |
| CVE-2023-40053 | HTML injection vulnerability in Serv-U | 5.0CNA v3.1 | 0.8% | 2023-12-06 | Fix |
| CVE-2023-39539 | AMI AptioV failure when uploading a Logo image file | 7.5CNA v3.1 | 0.6% | 2023-12-06 | Exploit codeFix |
| CVE-2023-39538 | AMI AptioV failure when uploading a Logo image file | 7.5CNA v3.1 | 0.2% | 2023-12-06 | Fix |
| CVE-2023-39326 | Denial of service via chunk extensions in net/http | 5.3v3.1 | 1.2% | 2023-12-06 | Fix |
| CVE-2023-36655 | Prolion Cryptospike improper authentication | 9.8v3.1 | 1.0% | 2023-12-06 | |
| CVE-2023-34439 | Implem Pleasanter cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-32268 | Administrator equivalent Filr user can access proxy administrator credentials | 7.2CNA v3.1 | 0.7% | 2023-12-06 | Fix |
| CVE-2023-28876 | Afian FileRun comments to uploaded files missing authorization | 4.3v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-28875 | Afian FileRun shared files download terms stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-26154 | pubnub insufficient entropy | 5.9v3.1 | 1.0% | 2023-12-06 | Fix |
| CVE-2023-24547 | On Arista MOS configuration of a BGP password will cause the password to be logged in clear text | 5.9CNA v3.1 | 0.3% | 2023-12-06 | Fix |
| CVE-2023-22524 | Atlassian Companion remote code execution | 9.6CNA v3.0 | 24.5% | 2023-12-06 | Exploit codeFix |
| CVE-2023-22523 | Atlassian Assets Discovery Cloud remote code execution | 9.8CNA v3.0 | 11.1% | 2023-12-06 | Fix |
| CVE-2023-22522 | Atlassian Confluence Data Center server-side template injection | 9.0CNA v3.0 | 12.8% | 2023-12-06 | Emerging ThreatsFix |
| CVE-2023-6527 | Email Subscription Popup WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-6514 | Huawei AJMD-370S authentication bypass | 8.8CNA v3.1 | 0.3% | 2023-12-06 | Fix |
| CVE-2023-6512 | Google Chrome Web Browser UI inappropriate implementation | 6.5v3.1 | 1.3% | 2023-12-06 | Fix |
| CVE-2023-6511 | Google Chrome Autofill inappropriate implementation | 4.3v3.1 | 0.9% | 2023-12-06 | Fix |
| CVE-2023-6510 | Google Chrome Media Capture use-after-free | 8.8v3.1 | 1.0% | 2023-12-06 | Fix |
| CVE-2023-6509 | Google Chrome Side Panel Search use-after-free | 8.8v3.1 | 1.0% | 2023-12-06 | Fix |
| CVE-2023-6508 | Google Chrome Media Stream use-after-free | 8.8v3.1 | 1.0% | 2023-12-06 | Fix |
| CVE-2023-6459 | Mattermost public endpoint /metrics of Calls plugin reveals channel IDs | 5.3CNA v3.1 | 0.5% | 2023-12-06 | Fix |
| CVE-2023-6458 | Mattermost client side path traversal due to lack of route parameters validation | 7.1CNA v3.1 | 0.6% | 2023-12-06 | Fix |
| CVE-2023-6393 | Quarkus: Potential invalid reuse of context when @cacheresult on a uni is used | 5.3CNA v3.1 | 0.6% | 2023-12-06 | Fix |
| CVE-2023-6288 | Devolutions Remote Desktop Manager code injection | 7.8v3.1 | 0.3% | 2023-12-06 | Fix |
| CVE-2023-6273 | Huawei HarmonyOS permission management vulnerability in the module for disabling Sound Booster | 5.3v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-2861 | Qemu: 9pfs: Improper access control on special files | 7.1NVD v3.1 | 0.4% | 2023-12-06 | Fix |
| CVE-2023-49448 | Cross-site request forgery in JFinalCMS via admin/nav/delete | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49447 | Cross-site request forgery in JFinalCMS via /admin/nav/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49446 | Cross-site request forgery in JFinalCMS via /admin/nav/save | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49398 | Cross-site request forgery in JFinalCMS via /admin/category/delete | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49397 | Cross-site request forgery in JFinalCMS via /admin/category/updateStatus | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49396 | Cross-site request forgery in JFinalCMS via /admin/category/save | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49395 | Cross-site request forgery in JFinalCMS via /admin/category/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49383 | Cross-site request forgery in JFinalCMS via /admin/tag/save | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49382 | Cross-site request forgery in JFinalCMS via /admin/div/delete | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49381 | Cross-site request forgery in JFinalCMS via /admin/div/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49380 | Cross-site request forgery in JFinalCMS via /admin/friend_link/delete | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49379 | Cross-site request forgery in JFinalCMS via the component /admin/friend_link/save | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49378 | Cross-site request forgery in JFinalCMS via /admin/form/save | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49377 | Cross-site request forgery in JFinalCMS via /admin/tag/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49376 | Cross-site request forgery in JFinalCMS | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49375 | Cross-site request forgery in JFinalCMS via /admin/friend_link/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49374 | Cross-site request forgery in JFinalCMS via /admin/slide/update | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49373 | Cross-site request forgery in JFinalCMS | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49372 | Cross-site request forgery in JFinalCMS | 8.8v3.1 | 0.4% | 2023-12-05 | |
| CVE-2023-49297 | Unsafe YAML deserialization in PyDrive2 | 3.3CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-49292 | Possible private key restoration in go package github.com/ecies/go | 4.9CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-49291 | tj-actions branch-names improper sanitization of Branch Name leads to arbitrary code injection | 9.3CNA v3.1 | 1.4% | 2023-12-05 | Fix |
| CVE-2023-49290 | Malicious parameters can cause a denial of service in lestrrat-go/jwx | 5.3CNA v3.1 | 0.7% | 2023-12-05 | Fix |
| CVE-2023-49289 | michaelschwarz Ajax.NET-Professional cross-site scripting in Ajax.NET Professional | 6.3CNA v3.1 | 0.6% | 2023-12-05 | Fix |
| CVE-2023-49284 | Command substitution output can trigger shell expansion in Fish shell | 3.9CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-49283 | microsoftgraph msgraph-sdk-php-core information disclosure | 5.4CNA v3.1 | 2.2% | 2023-12-05 | Fix |
| CVE-2023-49282 | microsoftgraph msgraph-sdk-php test code in published microsoft-graph package exposes phpinfo | 5.4CNA v3.1 | 2.2% | 2023-12-05 | Fix |
| CVE-2023-49070 | Pre-auth RCE in Apache OFBiz due to XML-RPC still present | 9.8v3.1 | 95.4% | 2023-12-05 | NucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-48698 | Azure RTOS USBX remote code execution | 6.8CNA v3.1 | 0.9% | 2023-12-05 | Fix |
| CVE-2023-48697 | Azure RTOS USBX remote code execution | 6.4CNA v3.1 | 1.2% | 2023-12-05 | Fix |
| CVE-2023-48696 | Azure RTOS USBX remote code execution | 6.7CNA v3.1 | 0.9% | 2023-12-05 | Fix |
| CVE-2023-48695 | Azure RTOS USBX remote code execution | 7.2CNA v3.1 | 1.2% | 2023-12-05 | Fix |
| CVE-2023-48694 | Azure RTOS USBX remote code execution | 6.8CNA v3.1 | 1.3% | 2023-12-05 | Fix |
| CVE-2023-48693 | Azure RTOS ThreadX remote code execution | 8.7CNA v3.1 | 1.3% | 2023-12-05 | Fix |
| CVE-2023-48692 | Azure RTOS NetX Duo remote code execution | 9.1CNA v3.1 | 3.1% | 2023-12-05 | Fix |
| CVE-2023-48691 | Azure RTOS NetX Duo remote code execution | 8.1CNA v3.1 | 3.1% | 2023-12-05 | Fix |
| CVE-2023-48316 | Azure RTOS NetX Duo remote code execution | 9.8CNA v3.1 | 4.3% | 2023-12-05 | Fix |
| CVE-2023-48315 | Azure RTOS NetX Duo remote code execution | 8.8CNA v3.1 | 3.9% | 2023-12-05 | Fix |
| CVE-2023-47304 | Vonage VDV23 improper authentication | 7.8v3.1 | 0.3% | 2023-12-05 | |
| CVE-2023-46736 | Server-side request forgery in espocrm | 5.3CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-46674 | Elasticsearch-Hadoop unsafe deserialization | 6.0CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-45842 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-45841 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-45840 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-45839 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-45838 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-45287 | Before Go, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel | 7.5v3.1 | 1.3% | 2023-12-05 | Fix |
| CVE-2023-45085 | SoftIron HyperCloud improper initialization | 3.2CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-45084 | SoftIron HyperCloud media caddy removal and reinsertion without reboot may cause data loss | 7.0CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-45083 | HyperCloud: Admin and serveradmin users can be deleted | 4.2CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-44298 | Dell PowerEdge BIOS active debug code | 3.6CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-44297 | Dell PowerEdge BIOS active debug code | 7.1CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-44295 | Dell PowerScale OneFS improper resource control | 6.3CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-44288 | Dell PowerScale OneFS improper resource control | 7.5CNA v3.1 | 0.7% | 2023-12-05 | Fix |
| CVE-2023-44221 | SonicWall SMA100 Appliances OS command injection | 7.2v3.1 | 76.3% | 2023-12-05 | KEVEmerging ThreatsKCVFix |
| CVE-2023-43628 | GPSd NTRIP Stream Parsing functionality integer underflow | 7.5v3.1 | 1.2% | 2023-12-05 | |
| CVE-2023-43608 | Buildroot download without integrity check | 8.1v3.1 | 0.8% | 2023-12-05 | |
| CVE-2023-43472 | Information exposure in MLflow | 7.5v3.1 | 36.6% | 2023-12-05 | NucleiFix |
| CVE-2023-42581 | Samsung Galaxy Store InstantPlay deeplink vulnerability | 7.5CNA v3.1 | 1.2% | 2023-12-05 | Fix |
| CVE-2023-42580 | Samsung Galaxy Store MCSLaunch deeplink vulnerability | 7.5CNA v3.1 | 1.0% | 2023-12-05 | Fix |
| CVE-2023-42579 | Samsung Mobile Samsung Keyboard cleartext transmission of sensitive information | 6.5CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42578 | Samsung Mobile Samsung Data Store improper handling of insufficient permissions | 6.5CNA v3.1 | 0.7% | 2023-12-05 | Fix |
| CVE-2023-42577 | Samsung Mobile Samsung Voice Recorder improper access control | 6.8CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42576 | Samsung Mobile Samsung Pass improper authentication | 5.4CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-42575 | Samsung Mobile Samsung Pass improper authentication | 5.4CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-42574 | Samsung Mobile GameHomeCN improper access control | 5.1CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42573 | PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data. | 4.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42572 | Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information. | 3.3CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42571 | Samsung Find My Mobile remote unlock vulnerability | 7.6CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42570 | Samsung Mobile Devices KnoxCustomManagerService improper access control | 5.9CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42569 | Samsung Mobile Devices AR Emoji improper authorization | 4.0CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42568 | Samsung Mobile Devices SmartManagerCN improper access control | 7.3CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42567 | Samsung Mobile Devices out-of-bounds write | 7.3CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42566 | Samsung Mobile Devices libsavsvc out-of-bounds write | 7.3CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42565 | Samsung Mobile Devices Smart Clip improper input validation | 7.3CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42564 | Samsung Mobile Devices knoxcustom service improper access control | 6.6CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42563 | Samsung Mobile Devices integer overflow | 6.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42562 | Samsung Mobile Devices integer overflow | 6.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42561 | Samsung Mobile Devices bootloader out-of-bounds write | 7.1CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-42560 | Samsung Mobile Devices dec_mono_audb of libsavsac.so out-of-bounds write | 7.4CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42559 | Samsung Mobile Devices improper exception handling | 4.9CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42558 | Samsung Mobile Devices HDCP in HAL out-of-bounds write | 6.0CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-42557 | Samsung Mobile Devices libIfaaCa out-of-bounds write | 5.6CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-42556 | Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information. | 3.3CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-41835 | Apache Struts: Excessive disk usage | 7.5v3.1 | 7.3% | 2023-12-05 | Fix |
| CVE-2023-39248 | Dell Networking OS10 resource exhaustion | 7.5CNA v3.1 | 0.7% | 2023-12-05 | Fix |
| CVE-2023-37572 | Softing OPC incorrect default permissions | 7.5v3.1 | 0.6% | 2023-12-05 | Fix |
| CVE-2023-33107 | Qualcomm Multiple Chipsets integer overflow | 8.4CNA v3.1 | 0.7% | 2023-12-05 | KEVExploit codeFix |
| CVE-2023-33106 | Qualcomm Multiple Chipsets use of out-of-range pointer offset | 8.4CNA v3.1 | 0.8% | 2023-12-05 | KEVFix |
| CVE-2023-33098 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33097 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33092 | Qualcomm Snapdragon buffer copy without checking size of input in Bluetooth host | 8.4CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33089 | Qualcomm Snapdragon null pointer dereference in WLAN firmware | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33088 | Qualcomm Snapdragon null pointer dereference in WLAN firmware | 8.4CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33087 | Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Core | 7.8CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33083 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 9.8CNA v3.1 | 0.6% | 2023-12-05 | Fix |
| CVE-2023-33082 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 9.8CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33081 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33080 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2023-12-05 | Fix |
| CVE-2023-33079 | Qualcomm Snapdragon use of out-of-range pointer offset in Audio | 7.8CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33071 | Qualcomm Snapdragon improper access control in Automotive OS Platform Android | 8.4CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-33070 | Qualcomm Snapdragon improper authentication in Automotive OS | 7.1CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-33063 | Qualcomm Multiple Chipsets use-after-free | 7.8CNA v3.1 | 0.6% | 2023-12-05 | KEVFix |
| CVE-2023-33054 | Qualcomm Snapdragon improper authentication in GPS HLOS driver | 9.1CNA v3.1 | 0.4% | 2023-12-05 | Fix |
| CVE-2023-33053 | Qualcomm Snapdragon improper validation of array index in Kernel | 8.4CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-33044 | Reachable assertion in Data Modem | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33043 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33042 | Improper input validation in Modem | 7.5CNA v3.1 | 0.6% | 2023-12-05 | Fix |
| CVE-2023-33041 | Qualcomm Snapdragon reachable assertion in WLAN firmware | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Fix |
| CVE-2023-33024 | Qualcomm Snapdragon buffer copy without checking size of input in Radio Interface Layer | 6.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33022 | Qualcomm Snapdragon integer overflow to buffer overflow in HLOS | 8.4CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-33018 | Qualcomm Snapdragon integer overflow to buffer overflow in User Identity module | 7.8CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-33017 | Qualcomm Snapdragon buffer copy without checking size of input in Boot | 7.8CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-28588 | Qualcomm Snapdragon integer overflow or wraparound in Bluetooth host | 7.5CNA v3.1 | 0.5% | 2023-12-05 | Exploit codeFix |
| CVE-2023-28587 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-28586 | Qualcomm Snapdragon TZ Secure OS ELF loader information disclosure | 6.0CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-28585 | Qualcomm Snapdragon integer overflow to buffer overflow in TZ Secure OS | 8.2CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-28580 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 6.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-28579 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 6.7CNA v3.1 | 0.2% | 2023-12-05 | Fix |
| CVE-2023-28551 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in UTILS | 7.8CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-28550 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-28546 | Qualcomm Snapdragon buffer copy without checking size of input in SPS Applications | 7.8CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-26943 | ASSA ABLOY Yale Keyless Smart Lock weak cryptography | 6.5v3.1 | 0.2% | 2023-12-05 | |
| CVE-2023-26942 | ASSA ABLOY Yale Ia-210 RFID Tags weak cryptography | 6.5v3.1 | 0.2% | 2023-12-05 | |
| CVE-2023-26941 | ASSA ABLOY Yale Conexis L1 RFID Tags weak cryptography | 6.5v3.1 | 0.2% | 2023-12-05 | |
| CVE-2023-22668 | Qualcomm Snapdragon use-after-free in Audio | 6.7CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-22383 | Qualcomm Snapdragon use-after-free in Camera | 6.7CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-21634 | Qualcomm Snapdragon memory corruption | 6.7CNA v3.1 | 0.1% | 2023-12-05 | Fix |
| CVE-2023-6448 | Unitronics Vision PLC and HMI insecure default Password | 9.8v3.1 | 2.1% | 2023-12-05 | KEVFix |
| CVE-2023-6357 | OS command injection in multiple CODESYS products | 8.8CNA v3.1 | 1.0% | 2023-12-05 | Fix |
| CVE-2023-6269 | Atos Unify OpenScape administrative web interface argument injection | 9.8v3.1 | 1.9% | 2023-12-05 | Fix |
| CVE-2023-6180 | Resource exhaustion via memory leak in tokio-boring | 5.3CNA v3.1 | 0.6% | 2023-12-05 | Fix |
| CVE-2023-5970 | SonicWall SMA100 improper authentication | 8.8v3.1 | 0.9% | 2023-12-05 | Fix |
| CVE-2023-5808 | Hitachi Vantara System Management Unit information disclosure | 6.5NVD v3.1 | 0.5% | 2023-12-05 | Exploit codeFix |
| CVE-2023-5188 | WAGO improper input validation in IEC61850 Server / Telecontrol | 7.5CNA v3.1 | 1.0% | 2023-12-05 | Fix |
| CVE-2023-49293 | Cross-site scripting in `server.transformIndexHtml` via URL payload in vite | 6.1CNA v3.1 | 1.0% | 2023-12-04 | NucleiFix |
| CVE-2023-49288 | Denial of service in HTTP Collapsed Forwarding in Squid | 8.6CNA v3.1 | 4.8% | 2023-12-04 | Fix |
| CVE-2023-49287 | Buffer overflow vulnerabilities in tinydir | 7.7CNA v3.1 | 1.9% | 2023-12-04 | Fix |
| CVE-2023-49286 | squid-cache squid denial of service in Helper Process management | 8.6CNA v3.1 | 10.4% | 2023-12-04 | Fix |
| CVE-2023-49285 | Denial of service in HTTP Message Processing in Squid | 8.6CNA v3.1 | 88.1% | 2023-12-04 | Fix |
| CVE-2023-49280 | Data leak of password hash through xwiki Change Request | 7.7CNA v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-49108 | Sumitomo Electric Information Systems RakRak Document Plus path traversal | 8.8v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-49093 | HtmlUnit vulnerable to remote code execution (RCE) via XSTL | 9.8CNA v3.1 | 2.4% | 2023-12-04 | Fix |
| CVE-2023-49080 | Jupyter Server errors include tracebacks with path information | 3.5CNA v3.1 | 0.8% | 2023-12-04 | Fix |
| CVE-2023-48967 | Solon is vulnerable to deserialization of untrusted data | 9.8v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-48966 | ThinkAdmin arbitrary file upload | 8.8v3.1 | 1.1% | 2023-12-04 | |
| CVE-2023-48965 | ThinkAdmin unrestricted file upload | 8.8v3.1 | 0.9% | 2023-12-04 | |
| CVE-2023-48910 | Microcks contains a server-side request forgery | 9.8v3.1 | 1.0% | 2023-12-04 | Fix |
| CVE-2023-48866 | Grocy cross-site scripting | 5.4v3.1 | 0.7% | 2023-12-04 | |
| CVE-2023-48863 | SEMCMS SQL injection | 7.5v3.1 | 0.9% | 2023-12-04 | |
| CVE-2023-48815 | Keking kkFileView open redirect | 6.1v3.1 | 0.5% | 2023-12-04 | |
| CVE-2023-48800 | TOTOLINK X6000R Firmware OS command injection | 9.8v3.1 | 1.6% | 2023-12-04 | |
| CVE-2023-48799 | TOTOLINK X6000R Firmware command execution | 9.8v3.1 | 1.4% | 2023-12-04 | |
| CVE-2023-47701 | IBM Db2 denial of service | 6.5CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-47633 | Uncontrolled resource consumption in Traefik | 7.5CNA v3.1 | 1.3% | 2023-12-04 | Fix |
| CVE-2023-47124 | Denial of service whith ACME HTTPChallenge in Traefik | 5.9CNA v3.1 | 0.8% | 2023-12-04 | Fix |
| CVE-2023-47106 | Incorrect processing of fragment in the URL leads to authorization bypass in Traefik | 4.8CNA v3.1 | 0.6% | 2023-12-04 | Fix |
| CVE-2023-46167 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-45781 | Google Android utils.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-45779 | Google Android AOSP privilege escalation | 7.8v3.1 | 0.3% | 2023-12-04 | Exploit codeFix |
| CVE-2023-45777 | Google Android AccountManagerService.java privilege escalation | 7.8v3.1 | 0.3% | 2023-12-04 | Exploit codeFix |
| CVE-2023-45776 | Google Android broadcaster.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-45775 | Google Android broadcaster.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-45774 | Google Android ShortcutService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-45773 | Google Android btm_ble_gap.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-44306 | Dell PowerProtect Data Manager DM5500 Appliance path traversal | 6.5CNA v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-44305 | Dell PowerProtect Data Manager DM5500 Appliance stack-based buffer overflow | 8.1CNA v3.1 | 1.0% | 2023-12-04 | Fix |
| CVE-2023-44304 | Dell PowerProtect Data Manager DM5500 Appliance privilege escalation | 8.8CNA v3.1 | 1.0% | 2023-12-04 | Fix |
| CVE-2023-44302 | Dell PowerProtect Data Manager DM5500 Appliance improper authentication | 8.1CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-44301 | Dell PowerProtect Data Manager DM5500 Appliance cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-44300 | Dell PowerProtect Data Manager DM5500 Appliance plaintext password storage | 5.5CNA v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-44291 | Dell PowerProtect Data Manager DM5500 Appliance OS command injection | 7.2CNA v3.1 | 1.6% | 2023-12-04 | Fix |
| CVE-2023-42751 | UNISOC chipsets gnss service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42749 | UNISOC chipsets enginnermode service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42748 | UNISOC chipsets telecom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42747 | UNISOC chipsets camera service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42746 | UNISOC chipsets power manager missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42745 | UNISOC chipsets telecom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42744 | UNISOC chipsets telecom service missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42743 | UNISOC chipsets telecom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42742 | UNISOC chipsets sysui missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42741 | UNISOC chipsets telecom service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42740 | UNISOC chipsets telecom service privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42739 | UNISOC chipsets engineermode service privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42738 | UNISOC chipsets telocom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42737 | UNISOC chipsets telecom service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42736 | UNISOC chipsets telecom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42735 | UNISOC chipsets telephony service missing authorization | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42734 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42733 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42732 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42731 | UNISOC chipsets Gnss service out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42730 | UNISOC chipsets IMS service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42729 | UNISOC chipsets ril service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42728 | UNISOC chipsets phasecheckserver out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42727 | UNISOC chipsets gpu driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42726 | UNISOC chipsets TeleService out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42725 | UNISOC chipsets gpu driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42724 | UNISOC chipsets gpu driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42723 | UNISOC chipsets camera service out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42722 | UNISOC chipsets camera service use-after-free | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42721 | UNISOC SC9863A flv extractor denial of service | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42720 | UNISOC chipsets video service out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42719 | UNISOC chipsets video service out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42718 | UNISOC chipsets dialer information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42717 | UNISOC chipsets telephony service missing authorization | 7.5v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-42716 | UNISOC chipsets telephony service missing authorization | 7.5v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-42715 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42714 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42713 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42712 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42711 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42710 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42709 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42708 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42707 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42706 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42705 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42704 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42703 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42702 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42701 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42700 | UNISOC chipsets firewall service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42699 | UNISOC chipsets omacp service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42698 | UNISOC chipsets omacp service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42697 | UNISOC chipsets omacp service information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42696 | UNISOC chipsets telecom service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42695 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42694 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42693 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42692 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42691 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42690 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42689 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42688 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42687 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42686 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42685 | UNISOC chipsets wifi service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42684 | UNISOC chipsets gsp driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42683 | UNISOC chipsets gsp driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42682 | UNISOC chipsets gsp driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42681 | UNISOC chipsets ion service missing authorization | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42680 | UNISOC chipsets gpu driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42679 | UNISOC chipsets gpu driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42678 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42677 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42676 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42675 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42674 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42673 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42672 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-42671 | UNISOC chipsets imsservice information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-41613 | Ezviz Studio uncontrolled search path | 7.8v3.1 | 0.5% | 2023-12-04 | |
| CVE-2023-40692 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-40687 | IBM Db2 denial of service | 5.3CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-40465 | Sierra Wireless ALEOS improper input leads to DoS | 5.5NVD v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-40464 | Sierra Wireless ALEOS use of hard-coded certificate and private key | 6.8NVD v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-40463 | Sierra Wireless ALEOS use of hard-coded credentials | 7.2v3.1 | 0.6% | 2023-12-04 | Fix |
| CVE-2023-40462 | Sierra Wireless ALEOS improper input leads to DoS | 7.5v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-40461 | Sierra Wireless ALEOS cross-site scripting vulnerability in ACEManager | 4.8NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-40460 | Sierra Wireless ALEOS improper input leads to DoS | 5.4NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-40459 | Sierra Wireless ALEOS improper input leads to DoS | 7.5v3.1 | 2.3% | 2023-12-04 | Exploit codeFix |
| CVE-2023-40103 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-40098 | Google Android NotificationConversationInfo.java information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40097 | Google Android PackageManagerHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40096 | Google Android AudioRecordClient.cpp privilege escalation | 7.8v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-40095 | Google Android PendingIntentUtils.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40094 | Google Android ActivityTaskManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40092 | Google Android ShortcutService.java information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40091 | Google Android IncidentService.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40090 | Google Android btm_ble.cc improper signature verification | 6.5v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-40089 | Google Android DevicePolicyManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40088 | Google Android memory corruption | 8.8v3.1 | 1.7% | 2023-12-04 | Fix |
| CVE-2023-40087 | Google Android btif_avrcp_audio_track.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-40084 | Google Android MDnsSdListener.cpp memory corruption | 7.8v3.1 | 0.2% | 2023-12-04 | Fix |
| CVE-2023-40083 | Google Android utils.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40082 | Google Android fdt.rs privilege escalation | 9.8v3.1 | 0.6% | 2023-12-04 | Fix |
| CVE-2023-40081 | Google Android MediaDataManager.kt information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40080 | Google Android btm_ble_gap.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40079 | Google Android ShortcutService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40078 | Google Android a2dp_vendor_opus_decoder.cc out-of-bounds write | 9.8v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-40077 | Google Android MetaDataBase.cpp use-after-free | 8.1NVD v3.1 | 8.4% | 2023-12-04 | Fix |
| CVE-2023-40076 | Google Android CredentialManagerUi.java privilege escalation | 5.5v3.1 | 2.3% | 2023-12-04 | Fix |
| CVE-2023-40075 | Google Android ShortcutPackage.java denial of service | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40074 | Google Android denial of service | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-40073 | Google Android Notification.java information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-38727 | IBM Db2 denial of service | 5.3CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-38003 | IBM Db2 command execution | 7.2CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-35690 | Google Android rgxta3d.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-35668 | Google Android Notification.java information disclosure | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32870 | MediaTek chipsets out-of-bounds read in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32869 | MediaTek chipsets out-of-bounds write in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32868 | MediaTek chipsets out-of-bounds write in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32867 | MediaTek chipsets out-of-bounds write in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32866 | MediaTek chipsets out-of-bounds write in mmp | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32865 | MediaTek chipsets out-of-bounds write in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32864 | MediaTek chipsets out-of-bounds write in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32863 | MediaTek chipsets out-of-bounds read in display drm | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32862 | MediaTek chipsets out-of-bounds read in display | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32861 | MediaTek chipsets out-of-bounds read in display | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32860 | MediaTek chipsets classic buffer overflow in display | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32859 | MediaTek chipsets classic buffer overflow in meta | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32858 | MediaTek chipsets information disclosure in GZ | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32857 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in display | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32856 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in display | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32855 | MediaTek chipsets improper access control in aee | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32854 | MediaTek chipsets out-of-bounds write in ril | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32853 | MediaTek chipsets out-of-bounds write in rpmb | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32852 | MediaTek MT6779 improper input validation in cameraisp | 4.4v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32851 | MediaTek chipsets incorrect calculation of buffer size in decoder | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32850 | MediaTek chipsets integer underflow (wrap or wraparound) in decoder | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32849 | MediaTek chipsets incorrect comparison in cmdq | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32848 | MediaTek chipsets incorrect comparison in vdec | 6.7v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32847 | MediaTek chipsets out-of-bounds write in audio | 7.8v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-32846 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32845 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32844 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32843 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32842 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32841 | MediaTek chipsets reachable assertion in 5G Modem | 7.5v3.1 | 1.4% | 2023-12-04 | Fix |
| CVE-2023-32804 | Mali GPU Userspace Driver can make an out-of-bounds access | 7.8v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-29258 | IBM Db2 denial of service | 5.3CNA v3.1 | 1.1% | 2023-12-04 | Fix |
| CVE-2023-24052 | Connectize AC21000 G6 incorrect authorization | 9.8v3.1 | 0.7% | 2023-12-04 | |
| CVE-2023-24051 | Connectize AC21000 G6 missing brute-force protection | 9.8v3.1 | 0.7% | 2023-12-04 | |
| CVE-2023-24050 | Connectize AC21000 G6 cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-04 | |
| CVE-2023-24049 | Connectize AC21000 G6 default password | 9.8v3.1 | 0.7% | 2023-12-04 | |
| CVE-2023-24048 | Connectize AC21000 G6 cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-04 | |
| CVE-2023-24047 | Connectize AC21000 G6 insufficiently protected credentials | 6.8NVD v3.1 | 0.4% | 2023-12-04 | |
| CVE-2023-24046 | Connectize AC21000 G6 command injection | 6.8NVD v3.1 | 0.6% | 2023-12-04 | |
| CVE-2023-21403 | Google Android rgxta3d.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21402 | Google Android mmu_common.c out-of-bounds read | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21401 | Google Android devicemem_server.c out-of-bounds write | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21263 | Google Android pmr_os.c out-of-bounds write | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21228 | Google Android physmem_osmem_linux.c out-of-bounds write | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21227 | Google Android htbserver.c information disclosure | 7.5v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-21218 | Google Android physmem_osmem_linux.c out-of-bounds write | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21217 | Google Android TBD out-of-bounds write | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21216 | Google Android physmem_osmem_linux.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21215 | Google Android devicemem_server.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21166 | Google Android rgxta3d.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21164 | Google Android devicemem_server.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21163 | Google Android pmr.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-21162 | Google Android rgxta3d.c arbitrary code execution | 9.8v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-6481 | Logback receiver DOS vulnerability incomplete fix | 7.5v3.1 | 0.7% | 2023-12-04 | Fix |
| CVE-2023-6460 | Google information leak in nodejs-firestore | 4.0CNA v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2023-6063 | WP Fastest Cache WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 73.7% | 2023-12-04 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-5990 | Funnelforms Free for WordPress form Deletion/Duplication via CSRF | 6.5NVD v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-5979 | eCommerce Product Catalog Plugin for WordPress Products deletion via CSRF | 6.5NVD v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-5953 | Welcart e-Commerce WordPress plugin Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-5952 | Welcart e-Commerce WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 1.3% | 2023-12-04 | Fix |
| CVE-2023-5951 | Welcart e-Commerce WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-5944 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 0.4% | 2023-12-04 | |
| CVE-2023-5884 | Word Balloon WordPress plugin Avatar Removal via CSRF | 6.5NVD v3.1 | 0.3% | 2023-12-04 | Fix |
| CVE-2023-5874 | Popup box WordPress plugin Admin+ stored XSS in Popup settings | 4.8NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-5809 | Popup box WordPress plugin Admin+ stored XSS in Categories | 4.8NVD v3.1 | 0.5% | 2023-12-04 | Fix |
| CVE-2023-5768 | Hitachi Energy RTU500 series cross-site scripting | 5.9CNA v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-5767 | Hitachi Energy RTU500 cross-site scripting | 6.0CNA v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-5762 | Filr Secure document library WordPress plugin Author+ RCE via file upload with phar ext | 8.8NVD v3.1 | 2.0% | 2023-12-04 | Fix |
| CVE-2023-5332 | Dependency on vulnerable third-party component in GitLab | 5.9CNA v3.1 | 0.9% | 2023-12-04 | Fix |
| CVE-2023-5210 | AMP+ Plus WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-12-04 | |
| CVE-2023-5141 | BSK Contact Form 7 Blacklist WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-12-04 | |
| CVE-2023-5137 | Simply Excerpts WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-12-04 | Fix |
| CVE-2023-5108 | Easy Newsletter Signups WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-12-04 | |
| CVE-2023-5105 | Frontend File Manager WordPress plugin Editor+ arbitrary file download | 6.5NVD v3.1 | 1.0% | 2023-12-04 | Fix |
| CVE-2023-4460 | Uploading SVG, WEBP and ICO files WordPress plugin Author+ stored XSS via SVG | 5.4NVD v3.1 | 1.0% | 2023-12-04 | Exploit code |
| CVE-2023-49948 | Forgejo RSS feed endpoint vulnerability | 5.3v3.1 | 0.8% | 2023-12-03 | Fix |
| CVE-2023-49947 | Forgejo incorrect authorization | 7.5v3.1 | 0.6% | 2023-12-03 | Fix |
| CVE-2023-49946 | Forgejo incorrect permission assignment | 9.1v3.1 | 0.9% | 2023-12-03 | Fix |
| CVE-2023-49926 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-03 | |
| CVE-2023-45178 | IBM Db2 denial of service | 6.5CNA v3.1 | 1.1% | 2023-12-03 | Fix |
| CVE-2023-6474 | PHPGurukul Nipah Virus Testing Management System manage-phlebotomist.php cross-site request forgery | 6.5v3.1 | 0.4% | 2023-12-03 | |
| CVE-2023-49914 | Choosemuse Muse 2 denial of service | 6.5v3.1 | 0.4% | 2023-12-02 | |
| CVE-2023-39257 | Dell Rugged Control Center (RCC) improper access control | 7.3CNA v3.1 | 0.2% | 2023-12-02 | Fix |
| CVE-2023-39256 | Dell Rugged Control Center (RCC) improper access control | 7.3CNA v3.1 | 0.2% | 2023-12-02 | Fix |
| CVE-2023-6473 | SourceCodester Online Quiz System take-quiz.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-12-02 | |
| CVE-2023-6472 | Phpems Content Section api.cls.php cross-site scripting | 4.8v3.1 | 0.6% | 2023-12-02 | |
| CVE-2023-6467 | Thecosy IceCMS Comment Like improper enforcement of a single, unique action | 3.7v3.1 | 0.6% | 2023-12-02 | |
| CVE-2023-6466 | Thecosy IceCMS User Comment planet cross-site scripting | 6.1v3.1 | 0.6% | 2023-12-02 | |
| CVE-2023-6465 | PHPGurukul Nipah Virus Testing Management System registered-user-testing.php cross-site scripting | 6.1v3.1 | 0.8% | 2023-12-02 | |
| CVE-2023-6464 | SourceCodester User Registration and Login System add-user.php SQL injection | 9.8v3.1 | 0.8% | 2023-12-02 | |
| CVE-2023-49371 | RuoYi vulnerable to SQL injection | 9.8v3.1 | 3.7% | 2023-12-01 | |
| CVE-2023-49281 | Open redirect in Login function of Calendarinho | 4.7CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-49277 | Reflected cross-site scripting vulnerability in dpaste | 8.3CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-49276 | Attribute injection leading to XSS(cross-site-scripting) in uptime-kuma | 6.3CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-48893 | SLIMS Senayan Library Management System Bulian SQL injection | 8.8v3.1 | 0.7% | 2023-12-01 | |
| CVE-2023-48887 | Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request | 9.8v3.1 | 1.6% | 2023-12-01 | |
| CVE-2023-48886 | Luxiaoxun Nettyrpc deserialization of untrusted data | 9.8v3.1 | 1.4% | 2023-12-01 | |
| CVE-2023-48842 | D-Link Go-rt-ac750 command injection | 9.8v3.1 | 3.7% | 2023-12-01 | Exploit code |
| CVE-2023-48813 | SLIMS Senayan Library Management System Bulian SQL injection | 8.8v3.1 | 0.7% | 2023-12-01 | |
| CVE-2023-48801 | TOTOLINK X6000R Firmware command injection | 9.8v3.1 | 1.7% | 2023-12-01 | |
| CVE-2023-48314 | Unescaped passing of the request URL in Collabora Online | 7.1CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-48016 | PHPGurukul Restaurant Table Booking System SQL injection | 7.5v3.1 | 0.7% | 2023-12-01 | |
| CVE-2023-46746 | Authenticated PostHog users vulnerable to SSRF | 4.8CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-46174 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-45253 | Huddlycameraservices improper privilege management | 7.8v3.1 | 0.3% | 2023-12-01 | |
| CVE-2023-45252 | Huddlycameraservice DLL hijacking | 7.8v3.1 | 0.3% | 2023-12-01 | |
| CVE-2023-45168 | IBM AIX command execution | 8.4CNA v3.1 | 0.3% | 2023-12-01 | Fix |
| CVE-2023-44402 | ASAR Integrity bypass via filetype confusion in electron | 6.1CNA v3.1 | 0.2% | 2023-12-01 | Fix |
| CVE-2023-44382 | October CMS safe mode bypass using Twig sandbox escape | 9.1CNA v3.1 | 0.9% | 2023-12-01 | Fix |
| CVE-2023-44381 | October CMS safe mode bypass using page template injection | 4.9CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-43455 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.5% | 2023-12-01 | |
| CVE-2023-43454 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.5% | 2023-12-01 | |
| CVE-2023-43453 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.5% | 2023-12-01 | |
| CVE-2023-43089 | Dell Rugged Control Center unauthorized access | 4.4CNA v3.1 | 0.2% | 2023-12-01 | Fix |
| CVE-2023-43021 | IBM InfoSphere Information Server information disclosure | 5.3CNA v3.1 | 0.7% | 2023-12-01 | Fix |
| CVE-2023-43015 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-42022 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-42019 | IBM InfoSphere Information Server information disclosure | 5.9CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-42009 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-42006 | IBM i information disclosure | 8.4CNA v3.1 | 0.2% | 2023-12-01 | Fix |
| CVE-2023-40699 | IBM InfoSphere Information Server denial of service | 7.5CNA v3.1 | 1.1% | 2023-12-01 | Fix |
| CVE-2023-38268 | IBM InfoSphere Information Server cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2023-12-01 | Fix |
| CVE-2023-28896 | JOYNEXT MIB3 Infotainment Unit weak encoding for password in UDS services | 2.4v3.1 | 0.1% | 2023-12-01 | |
| CVE-2023-28895 | JOYNEXT MIB3 Infotainment Unit hard-coded password for access to power controller chip memory | 6.8v3.1 | 0.3% | 2023-12-01 | |
| CVE-2023-26024 | IBM Planning Analytics on Cloud Pak for Data information disclosure | 6.5CNA v3.1 | 0.2% | 2023-12-01 | Fix |
| CVE-2023-6463 | SourceCodester User Registration and Login System add-user.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-12-01 | |
| CVE-2023-6462 | SourceCodester User Registration and Login System delete-user.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-12-01 | |
| CVE-2023-6461 | Cross-site scripting (XSS) Reflected in viliusle/Minipaint | 6.1NVD v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-6449 | Contact Form 7 WordPress plugin authenticated (Editor+) arbitrary file upload | 7.2v3.1 | 1.7% | 2023-12-01 | Fix |
| CVE-2023-6033 | Improper neutralization of input during web page generation (cross-site scripting) in GitLab | 8.7CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-5995 | Incorrect authorization in GitLab | 4.4CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-5915 | Yokogawa Electric STARDOM resource exhaustion | 5.3v3.1 | 1.2% | 2023-12-01 | |
| CVE-2023-5637 | Plaintext storage of a password in ArslanSoft's Education Portal | 7.5CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-5636 | Malicious file upload in ArslanSoft's Education Portal | 9.8CNA v3.1 | 1.7% | 2023-12-01 | Fix |
| CVE-2023-5635 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ArslanSoft Education Portal allows Account Footprinting. This issue affects Education Portal: before v1.1. | 7.5CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-5634 | SQLi in ArslanSoft's Education Portal | 9.8CNA v3.1 | 0.8% | 2023-12-01 | Fix |
| CVE-2023-5427 | Mali GPU Kernel Driver allows improper GPU processing operations | 7.8v3.1 | 0.3% | 2023-12-01 | Fix |
| CVE-2023-5226 | Improper control of generation of code (code injection) in GitLab | 4.8CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-4912 | Allocation of resources without limits or throttling in GitLab | 2.6CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-4658 | Incorrect authorization in GitLab | 3.1CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-4518 | Hitachi Energy Relion670 improper quantity validation | 6.5CNA v3.1 | 0.7% | 2023-12-01 | Fix |
| CVE-2023-4317 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.4% | 2023-12-01 | Fix |
| CVE-2023-3964 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2023-12-01 | Fix |
| CVE-2023-3949 | Insertion of sensitive information into sent data in GitLab | 5.3CNA v3.1 | 0.6% | 2023-12-01 | Fix |
| CVE-2023-3443 | Incorrect authorization in GitLab | 3.1CNA v3.1 | 0.4% | 2023-12-01 | Fix |