2023

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via th

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Pyth

Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere

Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handli

An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in t

Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete arbitrary files via /admin/AdminBackup/del.

File upload vulnerability in DuxCMS 2.1 allows attackers to execute arbitrary php code via duxcms/AdminUpload/upload.

Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability

Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the

Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnera

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to r

Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vul

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit thi

Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.

Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerab

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerab

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broad

Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will aff

Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation o

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect se

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerabi

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerabili

Use After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cau

Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions. Successful exploitation of t

Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorize

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful expl

Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect

Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerabili

Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel

Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service co

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to

All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input i

Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows atta

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account informa

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attack

Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 a

Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade

Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacke

Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local atta

Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with s

Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows lo

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local a