CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- sophos connect, connect client +1 moreMultiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript...3.3 Low
- sophos connect, connect client +1 moreAn information disclosure vulnerability allows sensitive key material to be included in technical...5.5 Medium
- sophos connect, connect client +1 moreA CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in...4.3 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telephone service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telephone service, there is a missing permission check. This could lead to local escalation of...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn gpu device, there is a memory corruption due to a use after free. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing params check. This could lead to local denial of...5.5 Medium
- thingsboardAn issue was discovered in ThingsBoard 3.4.1, allows low privileged attackers (CUSTOMER_USER) to...8.8 High
- google chromeInsufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote...8.8 High
- google androidIn ffa_mrd_prot of shared_mem.c, there is a possible ID due to a logic error in the code. This...5.5 Medium
- google androidIn OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input...6.7 Medium
- google androidIn sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a...9.8 Critical
- google androidIn Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check...9.8 Critical
- qualcomm sd888 5g firmware, sd 8 gen1 5g firmware, sw5100 firmware +14 more +16 moreBuffer copy without checking the size of input in Linux Kernel8.4 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreImproper Validation of Array Index in Bluetooth HOST7.3 High
- qualcomm apq8064au firmware, apq8096au firmware, aqt1000 firmware +70 more +72 moreUse after free in WLAN6.7 Medium
- kubernetesNode address isn't always verified when proxying6.6 Medium
- kubernetesUnauthorized read of Custom Resources6.5 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +181 more +183 moreInformation Exposure in Graphics6.2 Medium
- google androidIn parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds...7.8 High
- google androidIn parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to...9.8 Critical
- google androidIn validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored...5.5 Medium
- google androidIn isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due...5.5 Medium