Search vulnerabilities

Results 12,015

Export CSV
CVE-2023-43501

A missing permission check in Jenkins Build Failure Analyzer Plugin 2.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified hostname and port using attacker-specified username and password.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2023-43488

The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge) protocol to be exposed on the network, exploiting it to gain a privileged shell on the device without requiring the physical access through USB.

CVSS 3.1 · 7.9 High EPSS < 1% KEV · Not listed
Vendors
CVE-2023-43194

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by modifying request parameter.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-43135

There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
CVE-2023-43090

Gnome-shell: screenshot tool allows viewing open windows when session is locked

A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using keyboard shortcuts to unlock the restricted functionality of the screenshot tool.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Products
CVE-2023-42749

In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42748

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42746

In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42745

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42743

In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42741

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42740

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42739

In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42738

In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42737

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42735

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42734

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42733

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-42732

In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more