CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
libxml2OSS-FuzzHeap-buffer-overflow in xmlCopyCharMultiByteNo scoreespeak-ngOSS-FuzzStack-buffer-overflow in TranslateWord3No score- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn FW-PackageManager, there is a possible missing permission check. This could lead to local...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn FW-PackageManager, there is a possible missing permission check. This could lead to local...6.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. t606/t612/t616 +1 moreIn jpg driver, there is a possible out of bounds write due to improper input validation. This...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn urild service, there is a possible out of bounds write due to a missing bounds check. This...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn Telecom service, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a +1 moreIn Messaging, there is a possible missing permission check. This could lead to local information...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn SoundRecorder service, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn SoundRecorder service, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn telecom service, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. t760/t770/t820/s8000 +1 moreIn telecom service, there is a possible way to write permission usage records of an app due to a...4.4 Medium
- google android, unisoc s8000, sc9863a +9 more +11 moreIn linkturbo, there is a possible missing permission check. This could lead to local escalation...7.8 High
- google android, unisoc s8000, sc7731e +12 more +14 moreIn phasechecksercer, there is a possible missing permission check. This could lead to local...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn phasecheckserver, there is a possible missing permission check. This could lead to local...5.5 Medium
- google android, unisoc t606, t612 +2 more +4 moreIn jpg driver, there is a possible use after free due to a logic error. This could lead to remote...7.5 High
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn Dialer, there is a possible missing permission check. This could lead to local information...4.4 Medium
- python urllib3Authorization Header forwarded on redirect6.1 Medium
mongooseOSS-FuzzUNKNOWN READ in skip_chunkNo scoreglogOSS-FuzzUNKNOWN READ in google::ParseTemplateArgNo scorelibdwarfOSS-FuzzHeap-buffer-overflow in _dwarf_memcpy_noswap_bytesNo scorentopngOSS-FuzzHeap-buffer-overflow in Flow::dissectMDNSNo scoreradare2OSS-FuzzUNKNOWN READ in r_str_ncpyNo scorevinagreDebianvinagre - security updateNo scoregnome-boxesDebiangnome-boxes - security updateNo score- trustedfirmware mbed tls, mbed mbedtls +1 moreMbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code...9.8 Critical
- arm mbed tls, fedoraproject fedora, mbed mbedtls +2 moreMbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.7.5 High
- ibm security directory suite, security directory suite va +1 moreIBM Security Directory Suite information disclosure3.7 Low
ImageResizer.Plugins.FreeImageNuGetVulnerable version of libwebp and can be exploited with a malicious source image8.8 High- neuvectorJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Critical
- ibm engineering lifecycle management, collaborative lifecycle management +1 moreIBM Jazz Foundation information disclosure4.0 Medium
- zephyrproject zephyrPotential buffer overflow vulnerability in the Zephyr CANbus subsystem7.6 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-site Scripting (XSS) - Stored in snipe/snipe-it5.5 Medium
- google androidIn killBackgroundProcesses of ActivityManagerService.java, there is a possible way to escape...7.8 High
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target field7.1 High
- puppet boltCVE-2023-5214 - Privilege Escalation in Puppet Bolt6.5 Medium
- facebook tac plus, fedoraproject fedora +1 moreA lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker who can control the username, rem-addr, or NAC address sent…9.8 Critical
- discourse discourse-jira, jira +1 moreDiscourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location4.1 Medium
webpPyPIBundled libwebp in pywebp vulnerable8.8 High- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud3.8 Low
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud3.8 Low
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client5.2 Medium
- Show moreLoading…