CVE-2023-42xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
687 records · Page 3 of 7
Improper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
UpdatedAn attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the "username" parameter in the SNMP configuration.
UpdatedProcess Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) by renaming an executable file to a new extensionless 255-character name and launching it with NtCreateUserProcess. This can occur through an issue in wcscat_s error handling.
Updated- CVE-2023-42756: Kernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap 4.4 Medium
A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system.
Updated A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.
UpdatedA NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
Updated- CVE-2023-42753: Kernel: netfilter: potential slab-out-of-bound access due to integer underflow 7.0 High
An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.
Updated - CVE-2023-42752: Kernel: integer overflow in igmpv3_newpack leading to exploitable memory access 5.5 Medium
An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to function pointers.
Updated In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed
UpdatedIn flv extractor, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed
UpdatedIn dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
UpdatedIn gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedIn imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
UpdatedA flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptions in the AD DC service. When Samba's RPC server experiences a high load or unresponsiveness, servers intended for non-AD DC purposes (for example, NT4-emulation "classic DCs") can erroneously start and compete for the same unix domain sockets. This issue lea
UpdatedA vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. This vulnerability stems from an RPC function that can be blocked indefinitely. The issue arises because the "rpcecho" service operates with only one worker in the main RPC task, allowing calls to the "rpcecho" server to be blocked for a specified time, causing s
UpdatedIncorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access.
UpdatedImproper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.
Updated- CVE-2023-42666: Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate 5.3 Medium
The affected product is vulnerable to an exposure of sensitive information to an unauthorized actor vulnerability, which may allow an attacker to create malicious requests for obtaining the information of the version about the web server used.
Updated - CVE-2023-42665: This is unused. Rejected
This is unused.
Updated · Rejected record A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Updated- CVE-2023-42663: Apache Airflow: Bypass permission verification to view task instances of other dags Unscored
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.
Updated - CVE-2023-42662: JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens 9.3 Critical
JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.
Updated JFrog Artifactory prior to version 7.76.2 is vulnerable to Arbitrary File Write of untrusted data, which may lead to DoS or Remote Code Execution when a specially crafted series of requests is sent by an authenticated user. This is due to insufficient validation of artifacts.
UpdatedIn Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to the MOVEit Transfer machine i
Updated