CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- gpacGPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data ...5.5 Medium
- gpacGPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in...5.5 Medium
- gpacGPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl ...5.5 Medium
- gpacGPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size...5.5 Medium
- jspxcmsThere is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of...6.1 Medium
- wuzhicmsSQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary...9.8 Critical
- dmpop mejiroReflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To...6.1 Medium
- hadskyAn arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary...8.8 High
- bigtreecms bigtree cmsCross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute...5.4 Medium
- addify free giftsSQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker...9.8 Critical
- google androidIn multiple locations, there is a possible cross-user read due to a confused deputy. This could...5.5 Medium
- google androidIn readLogs of StatsService.cpp, there is a possible memory corruption due to a use after free....7.8 High
- google androidIn multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use...7.8 High
- google androidIn multiple locations, there is a possible way for apps to access cross-user message data due to...5.5 Medium
- google androidIn ippSetValueTag of ipp.c, there is a possible out of bounds read due to a missing bounds check....5.5 Medium
- google androidIn setMediaButtonReceiver of MediaSessionRecord.java, there is a possible way to send a pending...7.8 High
- google androidIn multiple functions of MtpPacket.cpp, there is a possible out of bounds write due to a heap...7.8 High
- google androidIn createFromParcel of UsbConfiguration.java, there is a possible background activity launch (BAL...7.8 High
- google androidIn ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data....7.8 High
- google androidIn sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity...7.8 High
- google androidIn backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive...5.5 Medium
- google androidIn ca-certificates, there is a possible way to read encrypted TLS data due to untrusted...7.5 High
- google androidIn discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use...7.8 High
- insyde insydeh2o, insydeh20 +1 moreA stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with...9.8 Critical
- qualcomm qam8255p firmware, qam8295p firmware, qam8650p firmware +58 more +60 moreUse After Free in Audio8.4 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +257 more +259 moreBuffer Copy Without Checking Size of Input in Audio7.8 High
- qualcomm apq5053-aa firmware, aqt1000 firmware, ar8035 firmware +150 more +152 moreBuffer Copy Without Checking Size of Input in Audio7.8 High
- qualcomm apq5053-aa firmware, apq8009 firmware, apq8017 firmware +163 more +165 moreBuffer Copy Without Checking Size of Input in Automotive Audio7.8 High
- google android, mediatek, inc. mt6883, mt6885, mt6889, mt6893, mt8797, mt8798 +1 moreIn video, there is a possible out of bounds write due to a missing bounds check. This could lead...7.8 High
- google android, mediatek, inc. mt6893, mt6895, mt6983, mt6985, mt8797, mt8798 +1 moreIn display, there is a possible out of bounds write due to an integer overflow. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, mt8798 +1 moreIn keyinstall, there is a possible memory corruption due to type confusion. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, mt8798 +1 moreIn secmem, there is a possible memory corruption due to type confusion. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt6985, mt8797, mt8798 +1 moreIn video, there is a possible memory corruption due to a race condition. This could lead to local...7.0 High
- qualcomm csrb31024 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +53 more +55 moreBuffer Over-read in WLAN HOST6.6 Medium
- qualcomm aqt1000 firmware, ar9380 firmware, c-v2x 9150 firmware +146 more +148 moreBuffer Over-read in Qualcomm IPC6.1 Medium
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +142 more +144 moreBuffer Over-read in WLAN Host6.1 Medium
- mediatek mt6835, mt6873, mt6875 +20 more +22 moreIn 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could...7.5 High