Latest CVE Feed
-
5.5
MEDIUMCVE-2023-23495
A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14. An app may be able to access sensitive user data.... Read more
Affected Products : macos- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40426
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences.... Read more
Affected Products : macos- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks.... Read more
Affected Products : macos- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-41911
Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2).... Read more
- Published: Sep. 28, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-5321
Missing Authorization in GitHub repository hamza417/inure prior to build94.... Read more
Affected Products : inure- Published: Sep. 30, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-37605
Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter.... Read more
Affected Products : enterprise_mobility_management- Published: Oct. 02, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-26238
An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by sending a crafted message to a named pipe.... Read more
Affected Products : epp_firmware edr_firmware epdr_firmware panda_ad360_firmware epp edr epdr panda_ad360- Published: Oct. 05, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21253
In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.... Read more
Affected Products : android- Published: Oct. 06, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40633
In phasecheckserver, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Oct. 08, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40645
In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Oct. 08, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40648
In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Oct. 08, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40649
In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Oct. 08, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-26734
Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context. ... Read more
Affected Products : client_connector- Published: Oct. 23, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-43065
Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability. A low-privileged authenticated attacker can exploit these issues to obtain escalated privileges. ... Read more
Affected Products : unity_operating_environment unity_xt_operating_environment unityvsa_operating_environment- Published: Oct. 23, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2017-1624
IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 133122.... Read more
Affected Products : qradar_security_information_and_event_manager- Published: Apr. 04, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21295
In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp... Read more
Affected Products : android- Published: Oct. 30, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40101
In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.... Read more
Affected Products : android- Published: Oct. 30, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42632
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Nov. 01, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42638
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed... Read more
- Published: Nov. 01, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42653
In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges... Read more
- Published: Nov. 01, 2023
- Modified: Nov. 21, 2024