Latest CVE Feed
-
5.5
MEDIUMCVE-2019-15359
The Haier A6 Android device with a build fingerprint of Haier/A6/A6:8.1.0/O11019/1534219877:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-loc... Read more
- Published: Nov. 14, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-15360
The Hisense U965 Android device with a build fingerprint of Hisense/U965_4G_10/HS6739MT:8.1.0/O11019/Hisense_U965_4G_10_S01:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0)... Read more
- Published: Nov. 14, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-48635
Adobe After Effects versions 24.0.3 (and earlier) and 23.6.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as A... Read more
- Published: Dec. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-47062
Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue... Read more
- Published: Dec. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2019-15355
The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows... Read more
- Published: Nov. 14, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44361
Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations s... Read more
- Published: Nov. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44357
Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Nov. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-44332
Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. E... Read more
- Published: Nov. 16, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-42811
aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even if tag verifica... Read more
- Published: Sep. 22, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUM- Published: Sep. 12, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-40528
This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS 10, macOS Sonoma 14, iOS 17 and iPadOS 17, macOS Ventura 13.6.4. An app may be able to bypass Privacy preferences.... Read more
- Published: Jan. 23, 2024
- Modified: Jun. 17, 2025
-
5.5
MEDIUMCVE-2023-40429
A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data.... Read more
- Published: Sep. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38259
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data.... Read more
Affected Products : macos- Published: Jul. 27, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38244
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38241
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-38235
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigati... Read more
- Published: Aug. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-3649
iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file... Read more
Affected Products : wireshark- Published: Jul. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-36406
Windows Hyper-V Information Disclosure Vulnerability... Read more
- Published: Nov. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-35136
An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W) series firmware versions 4.16 through 5.37, USG20(W)-VPN se... Read more
Affected Products : usg20w-vpn_firmware zld usg_20w-vpn_firmware usg_flex_100_firmware vpn100_firmware atp100_firmware atp100 atp200 atp500 atp100w +15 more products- Published: Nov. 28, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an applicatio... Read more
- Published: Jun. 16, 2023
- Modified: Nov. 21, 2024