Lucene search

K

EC-CUBE CO.,LTD. Security Vulnerabilities

osv
osv

CVE-2022-24781

Geon is a board game based on solving questions about the Pythagorean Theorem. Malicious users can obtain the uuid from other users, spoof that uuid through the browser console and become co-owners of the target session. This issue is patched in version 1.1.0. No known workaround...

7.1CVSS

6.6AI Score

0.001EPSS

2022-03-24 09:15 PM
2
osv
osv

CVE-2019-1547

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters (instead of using a named curve). In those cases it is possible that such a group does not have....

4.7CVSS

6.8AI Score

0.001EPSS

2019-09-10 05:15 PM
6
cve
cve

CVE-2023-47674

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB,....

9.8CVSS

9.4AI Score

0.001EPSS

2023-11-16 08:15 AM
10
apple
apple

About the security content of macOS Ventura 13.6.3

About the security content of macOS Ventura 13.6.3 This document describes the security content of macOS Ventura 13.6.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

8.6CVSS

8AI Score

0.004EPSS

2023-12-11 12:00 AM
17
cnvd
cnvd

Information Disclosure Vulnerability in EG2000SE of Beijing StarNet Ruijie Network Technology Co.

The EG2000SE is a multi-service router. An information disclosure vulnerability exists in the EG2000SE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by attackers to obtain sensitive...

6.4AI Score

2023-10-24 12:00 AM
5
openvas
openvas

Fedora: Security Advisory for grafana-pcp (FEDORA-2023-3bc3404fc1)

The remote host is missing an update for...

7.5AI Score

2023-11-05 12:00 AM
3
cve
cve

CVE-2023-47213

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB....

9.8CVSS

9.2AI Score

0.001EPSS

2023-11-16 08:15 AM
9
packetstorm

4.3CVSS

7.4AI Score

0.001EPSS

2023-11-27 12:00 AM
134
cve
cve

CVE-2023-42680

In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.6AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42679

In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42727

In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
osv
osv

CVE-2016-9471

Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters were not filtered, allowing apparently identical usernames to co-exist in the system, due to the...

3.1CVSS

6.9AI Score

0.001EPSS

2017-03-28 02:59 AM
3
cve
cve

CVE-2023-42725

In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.6AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42726

In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.6AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42724

In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.6AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42747

In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42744

In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.4AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42748

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42746

In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.7AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42740

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42722

In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges...

6.7CVSS

6.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42711

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42714

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42730

In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42745

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42681

In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
4
cve
cve

CVE-2023-42712

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
cve
cve

CVE-2023-42707

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42709

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42729

In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42710

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
9
cve
cve

CVE-2023-42741

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42701

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42703

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42702

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42705

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42697

In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42700

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42718

In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42739

In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42737

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.3AI Score

0.0004EPSS

2023-12-04 01:15 AM
3
cve
cve

CVE-2023-42751

In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42743

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

7.8CVSS

7.8AI Score

0.0004EPSS

2023-12-04 01:15 AM
5
cve
cve

CVE-2023-42723

In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.4AI Score

0.0004EPSS

2023-12-04 01:15 AM
7
cve
cve

CVE-2023-42684

In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges...

4.4CVSS

4.6AI Score

0.0004EPSS

2023-12-04 01:15 AM
10
cve
cve

CVE-2023-42715

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges...

5.5CVSS

5.2AI Score

0.0004EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42717

In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges...

7.5CVSS

7.2AI Score

0.001EPSS

2023-12-04 01:15 AM
8
cve
cve

CVE-2023-42742

In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges...

5.5CVSS

5.4AI Score

0.0004EPSS

2023-12-04 01:15 AM
6
Total number of security vulnerabilities16035