CVE-2023-30921

CVE-2023-30921 affects UNISOC chipsets (SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612/T616/T770/T820/S8000). Root cause: missing permission check in the messaging service, enabling local information disclosure with no additional execution privileges. Impact per sources: local confidential...

CVE-2023-35326

CVE-2023-35326 (Windows CDP User Components Information Disclosure) affects Windows CDP User Components and is rated CVSS v3.1 base 5.5 (LOCAL, Privileges Low, Confidentiality High). Evidence from NVD shows Information Disclosure vulnerability with Local access and high confidentiality impact; Mi...

CVE-2023-33174

Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.

KB5028182: Windows 11 version 21H2 Security Update (July 2023)

The remote Windows host is missing security update 5028182. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

CVE-2023-29381

The CVE-2023-29381 entry concerns Zimbra Collaboration (ZCS) versions 8.8.15 and 9.0, where a remote attacker can escalate privileges and disclose sensitive information via the password and 2FA parameters. Multiple connected sources (Red Hat, PT-Security, and related CVE aggregates) confirm the a...

CVE-2023-25517

NVIDIA vGPU software (Virtual GPU Manager, vGPU plugin) is affected by CVE-2023-25517, where a guest OS may control resources it is not authorized to access, potentially leading to information disclosure and data tampering. Affected product is NVIDIA vGPU software; the root cause is improper acce...

CVE-2023-21160

In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2023-21178

In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-14076241...

CVE-2023-21170

In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Design/Logic Flaw

In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure from the modem with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

Out-of-bounds

In initiateHs20IconQueryInternal of staiface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21178

In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-14076241...

CVE-2023-21193

CVE-2023-21193 is a vulnerability in Android 13 where the VideoFrame component in VideoFrame.h can abort due to an integer overflow, potentially enabling remote information disclosure without user interaction. The CVE is listed in multiple sources (NVD, Red Hat, PRION, OSV) with the same basic de...

CVE-2023-21210

In initiateHs20IconQueryInternal of staiface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2023-21237

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-21237

CVE-2023-21237 affects Android Framework UI logic in NotificationContentInflater.java (applyRemoteView) that can hide a foreground service notification due to misleading or insufficient UI, enabling local information disclosure without extra privileges. Public sources confirm impact on Android 13...

IBM Security Directory Suite VA Information Disclosure Vulnerability (CNVD-2023-51455)

IBM Security Directory Suite is a scalable, standards-based identity platform from International Business Machines IBM that simplifies identity and directory management. An information disclosure vulnerability exists in IBM Security Directory Suite VA, which can be exploited by an attacker to...

CVE-2023-32276

CVE-2023-32276 describes a stack-based buffer overflow in Fuji Electric TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. The root cause is improper validation of input length when processing a V8 file, which can lead to information disclosure and/or arbitrary code execution. The vulnerability affects ...

Information disclosure

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2023-33695

CVE-2023-33695 affects Hutool Core v5.8.17 and earlier, where FileUtil.createTempFile() stores the temporary file with insecure default permissions, enabling information disclosure. Multiple sources (NVD, Red Hat, GHSA, OSV, Veracode, CNNVD) confirm the vulnerability in /core/io/FileUtil.java. No...