2023-09-04 - CVE Archive

CVE-2023-38468 MEDIUM This Month

In urild service, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Denial Of Service Android

NVD

CVSS 3.1

4.4

EPSS

0.1%

CVE-2023-38467 MEDIUM This Month

In urild service, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow Denial Of Service Android

NVD

CVSS 3.1

4.4

EPSS

0.1%

CVE-2023-4059 MEDIUM This Month

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Profile Builder

NVD WPScan

CVSS 3.1

4.3

EPSS

0.2%

CVE-2023-20847 MEDIUM This Month

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Denial Of Service Yocto Iot Yocto +2

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20846 MEDIUM This Month

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Yocto Iot Yocto Android +1

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20845 MEDIUM This Month

In imgsys, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Yocto Iot Yocto Android +1

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20844 MEDIUM This Month

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Yocto Iot Yocto Android +1

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20843 MEDIUM This Month

In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Yocto Iot Yocto Android +1

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20839 MEDIUM This Month

In imgsys, there is a possible out of bounds read due to a missing valid range checking. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Yocto Iot Yocto Android +1

NVD

CVSS 3.1

4.2

EPSS

0.1%

CVE-2023-20838 MEDIUM This Month

In imgsys, there is a possible out of bounds read due to a race condition. Rated medium severity (CVSS 4.0). No vendor patch available.

Buffer Overflow Information Disclosure Yocto Android Linux Kernel

NVD

CVSS 3.1

4.0

EPSS

0.1%