Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

14,070 of 28,815· Page 186/282
5.5
CVE-2022-48233

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .

5.5
CVE-2022-48232

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .

5.5
CVE-2022-48231

In soter service, there is a possible missing permission check. This could lead to local denial of service with no addit

4.4
CVE-2022-47499

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47498

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47497

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47496

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47495

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47494

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

5.5
CVE-2022-47493

In soter service, there is a possible missing permission check. This could lead to local denial of service with no addit

5.5
CVE-2022-47492

In soter service, there is a possible missing permission check. This could lead to local denial of service with no addit

4.4
CVE-2022-47491

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

5.5
CVE-2022-47490

In soter service, there is a possible missing permission check. This could lead to local denial of service with no addit

4.4
CVE-2022-47489

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-47488

In spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

5.5
CVE-2022-47487

In thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local deni

4.4
CVE-2022-47486

In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local d

4.4
CVE-2022-47485

In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local

4.4
CVE-2022-47470

In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of

4.4
CVE-2022-47469

In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of

5.5
CVE-2022-47340

In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local

4.4
CVE-2022-47334

In phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local den

5.5
CVE-2022-44420

In modem, there is a possible missing verification of HashMME value in Security Mode Command. This could local denial of

5.5
CVE-2022-44419

In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE. This could local

4.4
CVE-2022-39089

In mlog service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial o

5.5
CVE-2022-38685

In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in blueto

5.4
CVE-2023-29188

SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF

5.9
CVE-2023-24376

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nico Graff WP Simple Events plugin <= 1.0 versions.

6.5
CVE-2023-23894

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Surbma Surbma | GDPR Proof Cookie Consent & Noti

6.1
CVE-2023-31183

Cybonet PineApp Mail Secure A reflected cross-site scripting (XSS) vulnerability was identified in the product, using

6.1
CVE-2023-31180

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS) through an unspecified reque

6.5
CVE-2023-31179

AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the s

4.8
CVE-2023-31141

OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10

4.8
CVE-2023-31140

OpenProject is open source project management software. Starting with version 7.4.0 and prior to version 12.5.4, when a

6.5
CVE-2023-31125

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Soc

6.1
CVE-2023-30334

AsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the MiniMag.asm and bbcod

6.1
CVE-2023-2582

A prototype pollution vulnerability exists in Strikingly CMS which can result in reflected cross-site scripting (XSS) in

6.7
CVE-2023-2513

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode siz

5.3
CVE-2023-24505

Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.

5.3
CVE-2023-21404

AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static R

5.4
CVE-2023-30790

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

5.4
CVE-2023-30789

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

5.4
CVE-2023-30788

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

5.4
CVE-2023-30787

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in

5.5
CVE-2023-28200

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4

5.5
CVE-2023-28192

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12

5.5
CVE-2023-28190

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura 1

5.5
CVE-2023-28189

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Bi

6.5
CVE-2023-28182

The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.

6.5
CVE-2023-28180

A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A user

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.