deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-42460
Published: 2023-09-27
Description: Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Uses of `_abi_decode()` can be constructed which allow for bounds checking to be bypassed resulting in incorrect results. This issue has not yet been fixed, but a fix is expected in release `0.3.10`. Users are advised to reference pull request #3626.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-682
References: https://github.com/vyperlang/vyper/pull/3626; https://github.com/vyperlang/vyper/security/advisories/GHSA-cx2q-hfxr-rj97; https://github.com/vyperlang/vyper/pull/3626
CVE: CVE-2023-42461
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The ITIL actors input field from the Ticket form can be used to perform a SQL injection. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-x3jp-69f2-p84w; https://github.com/glpi-project/glpi/security/advisories/GHSA-x3jp-69f2-p84w
CVE: CVE-2023-42462
Published: 2023-09-27
Description: GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some files. Users are advised to upgrade to version 10.0.10. There are no known workarounds for this vulnerability.
CVSS Score: 7.7 (HIGH)
CWE: CWE-22, CWE-434
References: https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75; https://github.com/glpi-project/glpi/security/advisories/GHSA-hm76-jh96-7j75
CVE: CVE-2023-42486
Published: 2023-09-27
Description: Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges.


CVSS Score: 6.3 (MEDIUM)
CWE: CWE-428
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-42487
Published: 2023-09-27
Description: Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-42657
Published: 2023-09-27
Description: 


In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized WS_FTP folder path.  Attackers could also escape the context of the WS_FTP Server file structure and perform the same level of operations (delete, rename, rmdir, mkdir) on file and folder locations on the underlying operating system.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023; https://www.progress.com/ws_ftp; https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
CVE: CVE-2023-42819
Published: 2023-09-27
Description: JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the 'Job-Template' menu and create a playbook named 'test'. Get the playbook id from the detail page, like 'e0adabef-c38f-492d-bd92-832bacc3df5f'. An attacker can exploit the directory traversal flaw using the provided URL to access and retrieve the contents of the file. `https://jumpserver-ip/api/v1/ops/playbook/e0adabef-c38f-492d-bd92-832bacc3df5f/file/?key=../../../../../../../etc/passwd` a similar method to modify the file content is also present. This issue has been addressed in version 3.6.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score: 8.9 (HIGH)
CWE: CWE-22
References: https://github.com/jumpserver/jumpserver/commit/d0321a74f1713d031560341c8fd0a1859e6510d8; https://github.com/jumpserver/jumpserver/security/advisories/GHSA-ghg2-2whp-6m33; https://github.com/jumpserver/jumpserver/commit/d0321a74f1713d031560341c8fd0a1859e6510d8
CVE: CVE-2023-42820
Published: 2023-09-27
Description: JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are not affect. Users not using local authentication are also not affected. Users are advised to upgrade to either version 2.28.19 or to 3.6.5. There are no known workarounds or this issue.
CVSS Score: 7.0 (HIGH)
CWE: CWE-200
References: https://github.com/jumpserver/jumpserver/commit/42337f0d00b2a8d45ef063eb5b7deeef81597da5; https://github.com/jumpserver/jumpserver/security/advisories/GHSA-7prv-g565-82qp; https://github.com/jumpserver/jumpserver/commit/42337f0d00b2a8d45ef063eb5b7deeef81597da5
CVE: CVE-2023-43154
Published: 2023-09-27
Description: In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confusion vulnerability that leads to authentication bypass and takeover of the administrator account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-843
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://github.com/ally-petitt/macs-cms-auth-bypass; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2023-43187
Published: 2023-09-27
Description: A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-91
References: https://github.com/jagat-singh-chaudhary/CVE/blob/main/CVE-2023-43187; https://github.com/jagat-singh-chaudhary/CVE/blob/main/CVE-2023-43187
CVE: CVE-2023-43216
Published: 2023-09-27
Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf; https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE: CVE-2023-43222
Published: 2023-09-27
Description: SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://blog.csdn.net/weixin_51394168/article/details/132817842; https://blog.csdn.net/weixin_51394168/article/details/132817842
CVE: CVE-2023-43232
Published: 2023-09-27
Description: A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dedebiz.com; https://github.com/yux1azhengye/mycve/blob/main/dedebiz_6.2.11_xss.pdf; https://www.dedebiz.com/download
CVE: CVE-2023-43234
Published: 2023-09-27
Description: DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filename parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://dedebiz.com; https://github.com/yux1azhengye; https://github.com/yux1azhengye/mycve/blob/main/DedeBIZ_v6.2.11_RCE.pdf
CVE: CVE-2023-43263
Published: 2023-09-27
Description: A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/b0marek/CVE-2023-43263; https://www.youtube.com/watch?v=-dXipo_q7tM; https://github.com/b0marek/CVE-2023-43263
CVE: CVE-2023-43291
Published: 2023-09-27
Description: Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://gist.github.com/Dar1in9s/e3db6b04daacb68633a97581bbd5921b; https://gist.github.com/Dar1in9s/e3db6b04daacb68633a97581bbd5921b
CVE: CVE-2023-43331
Published: 2023-09-27
Description: A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Kartikhunter/CVE/blob/main/CVE-2023-43331; https://github.com/Kartikhunter/CVE/blob/main/CVE-2023-43331
CVE: CVE-2023-43381
Published: 2023-09-27
Description: SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://gist.github.com/Chiaki2333/59ef607c3eb3a7b4db1537705d05e4d1; https://github.com/Chiaki2333/vulnerability/blob/main/tianchoy-blog-sql-login.php.md; https://gist.github.com/Chiaki2333/59ef607c3eb3a7b4db1537705d05e4d1
CVE: CVE-2023-43484
Published: 2023-09-27
Description: Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-43493
Published: 2023-09-27
Description: SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-43610
Published: 2023-09-27
Description: SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or higher privilege to perform unintended database operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-43614
Published: 2023-09-27
Description: Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN97197972/; https://www.welcart.com/archives/20106.html; https://jvn.jp/en/jp/JVN97197972/
CVE: CVE-2023-43645
Published: 2023-09-27
Description: OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service attack when certain Check calls are executed against authorization models that contain circular relationship definitions. When the call is made, it's possible for the server to exhaust resources and die. Users are advised to upgrade to v1.3.2 and update any offending models. There are no known workarounds for this vulnerability. Note that for models which contained cycles or a relation definition that has the relation itself in its evaluation path, checks and queries that require evaluation will no longer be evaluated on v1.3.2+ and will return errors instead. Users who do not have cyclic models are unaffected.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-835
References: https://github.com/openfga/openfga/commit/725296025fd81227c[PII_REDACTED]2c6acd4a605f6; https://github.com/openfga/openfga/security/advisories/GHSA-2hm9-h873-pgqh; https://github.com/openfga/openfga/commit/725296025fd81227c[PII_REDACTED]2c6acd4a605f6
CVE: CVE-2023-43646
Published: 2023-09-27
Description: get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when parsing malicious input. This vulnerability can be exploited when there is an imbalance in parentheses, which results in excessive backtracking and subsequently increases the CPU load and processing time significantly. This vulnerability can be triggered using the following input: '\t'.repeat(54773) + '\t/function/i'. This issue has been addressed in commit `f934b228b` which has been included in releases from 2.0.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.6 (HIGH)
CWE: CWE-400, CWE-1333
References: https://github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69; https://github.com/chaijs/get-func-name/security/advisories/GHSA-4q6p-r6v2-jvc5; https://github.com/chaijs/get-func-name/commit/f934b228b5e2cb94d6c8576d3aac05493f667c69
CVE: CVE-2023-43775
Published: 2023-09-27
Description: Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows 

attacker to potentially force an unexpected restart of the automation platform, impacting the availability of the product. In rare situations, the issue could cause
the SMP device to restart in Safe Mode or Max Safe Mode. When in Max Safe Mode, the product is
not vulnerable anymore.

CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2022-1008.pdf; https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2022-1008.pdf
CVE: CVE-2023-43825
Published: 2023-09-27
Description: Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product..
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://ekakin.la.coocan.jp/index.htm; https://jvn.jp/en/jp/JVN17434995/; http://ekakin.la.coocan.jp/index.htm
CVE: CVE-2023-43828
Published: 2023-09-27
Description: A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/al3zx/xss_languages_subrion_4.2.1; https://github.com/al3zx/xss_languages_subrion_4.2.1
CVE: CVE-2023-43830
Published: 2023-09-27
Description: A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum balance'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/al3zx/xss_financial_subrion_4.2.1; https://github.com/al3zx/xss_financial_subrion_4.2.1
CVE: CVE-2023-43856
Published: 2023-09-27
Description: Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: http://cms.iteachyou.cc/; http://dreamer.com; https://github.com/yux1azhengye
CVE: CVE-2023-43857
Published: 2023-09-27
Description: Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/u/toIndex.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitee.com/iteachyou/dreamer_cms/issues/I834WV; https://gitee.com/iteachyou/dreamer_cms/issues/I834WV
CVE: CVE-2023-44013
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/0/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/0/0.md
CVE: CVE-2023-44014
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFilterType and deviceList parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/1/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/1/0.md
CVE: CVE-2023-44015
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/8/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/8/0.md
CVE: CVE-2023-44016
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/7/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/7/0.md
CVE: CVE-2023-44017
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/6/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/6/0.md
CVE: CVE-2023-44018
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/10/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/10/0.md
CVE: CVE-2023-44019
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/5/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/5/0.md
CVE: CVE-2023-44020
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/9/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/9/0.md
CVE: CVE-2023-44021
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/2/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/2/0.md
CVE: CVE-2023-44022
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/3/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/3/0.md
CVE: CVE-2023-44023
Published: 2023-09-27
Description: Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/aixiao0621/Tenda/blob/main/AC10U/4/0.md; https://github.com/aixiao0621/Tenda/blob/main/AC10U/4/0.md
CVE: CVE-2023-44042
Published: 2023-09-27
Description: A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website header parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Gi0rgi0R/xss_frontend_settings_blackcat_cms_1.4.1; https://github.com/Gi0rgi0R/xss_frontend_settings_blackcat_cms_1.4.1
CVE: CVE-2023-44043
Published: 2023-09-27
Description: A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website title parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Gi0rgi0R/xss_installation_blackcat_cms_1.4.1; https://github.com/Gi0rgi0R/xss_installation_blackcat_cms_1.4.1
CVE: CVE-2023-44044
Published: 2023-09-27
Description: Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/TishaManandhar/Superstore-sql-poc/blob/main/SQL; https://github.com/TishaManandhar/Superstore-sql-poc/blob/main/SQL
CVE: CVE-2023-44121
Published: 2023-09-27
Description: The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action "com.lge.lms.things.notification.ACTION". Additionally, this vulnerability is very dangerous because LG ThinQ Service is a system app (having android:sharedUserId="android.uid.system" setting). Intent redirection in this app leads to accessing arbitrary not exported activities of absolutely all apps.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-926
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44122
Published: 2023-09-27
Description: The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The LockScreenSettings app copies the received file to the "/data/shared/dw/mycategory/wallpaper_01.png" path and then changes the file access mode to world-readable and world-writable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-927, CWE-668
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44123
Published: 2023-09-27
Description: The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag. 
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-285
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails