CWE-754

605 vulnerabilities with CWE-754

CVE-2023-30591 HIGH

NodeBB <= 2.8.10 - Unauthenticated Denial of Service via Crafted Socket.IO Messages

CVSS 7.5

CVE-2023-41993 HIGH KEV

iPadOS < 17.0.1 - Remote Code Execution via Web Content Processing

CVSS 8.8

CVE-2023-41992 HIGH KEV

iPadOS < 16.7 - Local Privilege Escalation

CVSS 7.8

CVE-2023-4828 MEDIUM

Proofpoint Insider Threat Management < 7.14.3.69 - Authenticated Configuration Tampering via Agent Credential Abuse

CVSS 6.4

CVE-2023-4583 HIGH

Firefox < 117 and Firefox ESR < 115.2 - Use-After-Free in HttpBaseChannel

CVSS 7.5

CVE-2023-29198 MEDIUM

Electron - Context Isolation Bypass

CVSS 6.0

CVE-2023-38283 MEDIUM

OpenBGPD < 8.1 - Denial of Service via BGP Path Attribute Length Handling

CVSS 5.3

CVE-2023-21230 MEDIUM

Android - Local Information Disclosure via WiFi Access Point Broadcast

CVSS 5.5

CVE-2023-21405 MEDIUM

Axis Network Door Controllers/Intercoms - DoS

CVSS 6.5

CVE-2023-37899 HIGH

Feathersjs < 4.5.18 - Denial of Service via Invalid String Conversion in Socket Handler

CVSS 7.5

CVE-2023-36835 HIGH

Juniper Junos OS on QFX10000 - Denial of Service via VXLAN Tunnel Packet Handling

CVSS 7.5

CVE-2023-21246 LOW

Android - Local Privilege Escalation via ShortcutInfo Exception Handling

CVSS 3.3

CVE-2023-38069 LOW

JetBrains IntelliJ IDEA < 2023.1.4 - License Dialog Suppression

CVSS 3.3

CVE-2023-37303 CRITICAL

MediaWiki < 1.39.3 - Denial of Service via CheckUser Extension Block Attempt

CVSS 9.8

CVE-2023-34099 MEDIUM

Shopware 5.1.4-5.7.17 - Account Hijacking via Email Address Normalization Bypass

CVSS 5.3

CVE-2023-35849 HIGH

VirtualSquare picoTCP < 2.1 - Denial of Service via Improper Header Size Check

CVSS 7.5

CVE-2023-34733 MEDIUM

Volkswagen Discover Media Infotainment System 0876 - Denial of Service via Crafted USB Media Files

CVSS 6.8

CVE-2023-21137 MEDIUM

Android 11-13 - Denial of Service in JobStore.java Job Map Parsing

CVSS 5.5

CVE-2023-34449 MEDIUM

ink! 4.0.0-4.2.0 - Incorrect Return Value Decoding in Delegate Call Mechanics

CVSS 5.3

CVE-2023-23602 MEDIUM

Firefox < 109 and Firefox ESR < 102.7 - Content Security Policy Bypass via WebSocket in WebWorker

CVSS 6.5

CVE-2023-32716 MEDIUM

Splunk Enterprise < 9.0.5, 8.2.11, 8.1.14 & Splunk Cloud < 9.0.2303.100 - DoS via {{dump}} SPL Command

CVSS 6.5

CVE-2023-32695 HIGH

socket.io-parser 3.4.0-3.4.2 and 4.0.4-4.2.2 - Denial of Service via Crafted Socket.IO Packet

CVSS 7.3

CVE-2023-21102 HIGH

Android Kernel - Local Privilege Escalation via Shadow Stack Protection Bypass

CVSS 7.8

CVE-2023-25620 MEDIUM

Schneider Electric Modicon M580 Firmware < 4.10 - Authenticated Denial of Service via Malicious Project File

CVSS 6.5

CVE-2023-25619 HIGH

Modicon M580 Firmware < 4.10 - Denial of Service via Modbus TCP Protocol

CVSS 7.5