CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- google androidIn InputMethod, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Overlay Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Activity Manager, there is a possible way to determine whether an app is installed due to a...5.5 Medium
- google androidIn Package Installer, there is a possible way to determine whether an app is installed, without...7.8 High
- google androidIn Permission Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager Service, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Settings, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Package Installer, there is a possible way to determine whether an app is installed, without...7.8 High
- google androidIn Activity Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager, there is a possible cross-user settings disclosure due to a missing...5.5 Medium
- google androidIn Device Policy, there is a possible way to verify if a particular admin app is registered on...5.5 Medium
- google androidIn UsageStatsService, there is a possible way to read installed 3rd party apps due to side...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn ContentService, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. This could...6.5 Medium
- google androidIn Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google androidIn Core, there is a possible way to forward calls without user knowledge due to a missing...7.8 High
- google androidIn IntentResolver, there is a possible cross-user media read due to a confused deputy. This could...5.5 Medium
- google androidIn Settings, there is a possible way to control private DNS settings from a secondary user due to...5.5 Medium
- google androidIn Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. This could...6.7 Medium
- google androidIn libcore, there is a possible out of bounds read due to a missing bounds check. This could lead...5.5 Medium
- google androidIn Composer, there is a possible out of bounds read due to a missing bounds check. This could...5.5 Medium
- google androidIn Bluetooth, there is a possible way for a paired Bluetooth device to access a long term...5.0 Medium
- google androidIn ContentService, there is a possible way to read installed sync content providers due to side...5.5 Medium
- google androidIn Content, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Content Service, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Content, here is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Package Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn ActivityManagerService, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn PackageManager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Package Manager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn Slice, there is a possible disclosure of installed applications due to side channel...7.8 High
- google androidIn SEPolicy, there is a possible way to access the factory MAC address due to a permissions...4.4 Medium
- sap se enable now, sap enable now enable now consump del, enable now wpb manager +2 more +4 moreClickjacking vulnerability in SAP Enable Now6.1 Medium
- google androidIn Permission, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn SliceManagerService, there is a possible way to check if a content provider is installed due...5.5 Medium
- google androidIn Slice, there is a possible disclosure of installed packages due to a missing permission check....5.5 Medium
- google androidIn PackageManagerNative, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Usage Stats Service, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn NFC, there is a possible way to setup a default contactless payment app without user consent...7.8 High
linux-awsUbuntu,linux-azureUbuntu,linux-gcpUbuntu +2 more +4 morelinux-aws, linux-azure, linux-gcp, linux-oracle, linux-raspi vulnerabilitiesNo score- kimaiKimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File7.2 High
github.com/docker/dockerGo/sys/devices/virtual/powercap accessible by default to containersNo score- codeigniter, codeigniter4 +1 moreCodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment7.5 High
- quic-goquic-go vulnerable to pointer dereference that can lead to panic7.5 High
- adobe acrobat for edge, microsoft edge chromium +1 morePDF Jbig2 memory-corruption Vulnerability - MSFT T55.5 Medium
- lenovo thinkpad bios, thinkpad 25 firmware, thinkpad l560 firmware +11 more +13 moreA vulnerability due to improper write protection of UEFI variables was reported in the BIOS of...6.7 Medium
- lenovo thinkpad, thinkpad bios, thinkpad e14 firmware +84 more +86 moreAn SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an...6.7 Medium
- lenovo thinkpad, thinkpad bios, thinkpad l14 firmware +53 more +55 moreAn SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an...6.7 Medium
- Show moreLoading…