Search Results (380220 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-24156 1 Totolink 2 T8, T8 Firmware 2025-03-26 9.8 Critical
A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2023-24148 1 Totolink 2 Ca300-poe, Ca300-poe Firmware 2025-03-26 9.8 Critical
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.
CVE-2023-23469 1 Ibm 1 Cloud Pak For Business Automation 2025-03-26 4 Medium
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.
CVE-2023-20606 2 Google, Mediatek 4 Android, Mt6879, Mt6895 and 1 more 2025-03-26 4.4 Medium
In apusys, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07571104; Issue ID: ALPS07571104.
CVE-2023-20605 2 Google, Mediatek 51 Android, Mt6580, Mt6731 and 48 more 2025-03-26 4.4 Medium
In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07550104; Issue ID: ALPS07550104.
CVE-2023-20604 2 Google, Mediatek 27 Android, Mt6735, Mt6737 and 24 more 2025-03-26 6.7 Medium
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494067; Issue ID: ALPS07494067.
CVE-2023-20602 2 Google, Mediatek 25 Android, Mt6735, Mt6737 and 22 more 2025-03-26 6.7 Medium
In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494107; Issue ID: ALPS07494107.
CVE-2022-47369 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.7 Medium
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47368 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.7 Medium
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2022-47367 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4.8 Medium
In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVE-2022-47366 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-47365 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-47364 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.7 Medium
In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-47363 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 5.7 Medium
In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-47356 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47355 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47354 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4 Medium
In log service, there is a missing permission check. This could lead to local denial of service in log service.
CVE-2022-47348 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 4 Medium
In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.
CVE-2022-47325 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
CVE-2022-47324 2 Google, Unisoc 14 Android, S8000, Sc7731e and 11 more 2025-03-26 6.4 Medium
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.