CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- relic project relicInteger Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab,...9.8 Critical
- netgear r6400v2, cbr40 firmware, lax20 firmware +13 more +15 moreBuffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote...9.8 Critical
- macwk icecmsAn issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain...9.8 Critical
- vesoft nebulagraph studioServer Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows...7.5 High
- pocketmanga smangaSQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to...9.8 Critical
- google androidIn MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after...7.8 High
- google androidIn avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer...8.8 High
- google androidIn bindSelection of DatabaseUtils.java, there is a possible way to access files from other...5.5 Medium
- google androidIn hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start...7.8 High
- google androidIn eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to...9.8 Critical
- google androidIn multiple locations, there is a possible way to import contacts belonging to other users due to...5.5 Medium
- google androidIn MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized...5.5 Medium
- google androidIn onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to...5.5 Medium
- google androidIn createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a...7.8 High
- google androidIn loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and...5.5 Medium
- android framework, google android +1 moreIn onCreate of WindowState.java, there is a possible way to launch a background activity due to a...7.8 High
- google androidIn build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer...8.8 High
- google androidIn onHostEmulationData of HostEmulationManager.java, there is a possible way for a general...5.5 Medium
- google androidIn computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps...7.8 High
- google androidIn checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to...7.8 High
- google androidIn updateList of NotificationAccessSettings.java, there is a possible way to hide approved...7.8 High
- google androidIn bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the...7.8 High
- google androidIn multiple files, there is a possible way to import a contact from another user due to a missing...7.8 High
- google androidIn convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a...8.8 High
- qualcomm apq8064au firmware, aqt1000 firmware, ar8035 firmware +166 more +168 moreUse After Free in Graphics8.4 High
- qualcomm 205 firmware, 215 firmware, 9206 lte firmware +109 more +111 moreImproper Authorization in WLAN Host7.5 High
- qualcomm aqt1000 firmware, csrb31024 firmware, fastconnect 6200 firmware +70 more +72 moreImproper Authorization in WLAN Host7.5 High
- bluditCross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary...4.8 Medium
- bluditPermissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate...7.8 High
- elsys ers 1.5, ers 1.5 firmware +1 moreELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser.7.5 High
- navblue n-ops \& crewNAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS).5.4 Medium
- mybbInstaller RCE on settings file write in MyBB before 1.8.22.9.8 Critical