deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36817
Published: 2023-07-03
Description: `tktchurch/website` contains the codebase for The King's Temple Church website. In version 0.1.0, a Stripe API key was found in the public code repository of the church's project. This sensitive information was unintentionally committed and subsequently exposed in the codebase. If an unauthorized party gains access to this key, they could potentially carry out transactions on behalf of the organization, leading to financial losses. Additionally, they could access sensitive customer information, leading to privacy violations and potential legal implications. The affected component is the codebase of our project, specifically the file(s) where the Stripe API key is embedded. The key should have been stored securely, and not committed to the codebase. The maintainers plan to revoke the leaked Stripe API key immediately, generate a new one, and not commit the key to the codebase.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-798
References: https://github.com/tktchurch/website/security/advisories/GHSA-x3m6-5hmf-5x3w; https://github.com/tktchurch/website/security/advisories/GHSA-x3m6-5hmf-5x3w
CVE: CVE-2023-36819
Published: 2023-07-03
Description: Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-services/dossier/importTemplateFile_` allows authenticated users to download template hosted on the server. However, starting in the 6.x.x branch and prior to version 8.1.8, the application does not sanitize the `_templateName_ `parameter allowing an attacker to use `*../*` in it, and escaping the directory the template are normally placed and download any file from the system. This vulnerability allows a low privileged attacker to exfiltrate sensitive configuration file. This issue has been patched in Knowage version 8.1.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-jw99-hxxj-75g2; https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-jw99-hxxj-75g2
CVE: CVE-2023-36608
Published: 2023-07-03
Description: 
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-36609
Published: 2023-07-03
Description: 
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.


CVSS Score: 7.2 (HIGH)
CWE: CWE-829, CWE-829
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-37378
Published: 2023-07-03
Description: Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory.
CVSS Score: 5.3 (MEDIUM)
References: http://sf.net/p/nsis/bugs/1296; https://github.com/kichik/nsis/commit/281e2851fe669d10e0650fc89d0e7fb74a598967; https://github.com/kichik/nsis/commit/409b5841479c44fbf33a6ba97c1146e46f965467
CVE: CVE-2020-22151
Published: 2023-07-03
Description: Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests parameter of the upload function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/daylightstudio/FUEL-CMS/issues/551; https://github.com/daylightstudio/FUEL-CMS/issues/551
CVE: CVE-2020-22152
Published: 2023-07-03
Description: Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/daylightstudio/FUEL-CMS/issues/552; https://github.com/daylightstudio/FUEL-CMS/issues/552
CVE: CVE-2020-22153
Published: 2023-07-03
Description: File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file to the upload parameter in the navigation function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/daylightstudio/FUEL-CMS/issues/553; https://github.com/daylightstudio/FUEL-CMS/issues/553
CVE: CVE-2020-22597
Published: 2023-07-03
Description: An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/jerryscript-project/jerryscript/issues/3637; https://github.com/jerryscript-project/jerryscript/issues/3637
CVE: CVE-2023-2727
Published: 2023-07-03
Description: Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2023/07/06/2; https://github.com/kubernetes/kubernetes/issues/118640; https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8
CVE: CVE-2023-2728
Published: 2023-07-03
Description: Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the `kubernetes.io/enforce-mountable-secrets` annotation are used together with ephemeral containers.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.openwall.com/lists/oss-security/2023/07/06/3; https://github.com/kubernetes/kubernetes/issues/118640; https://groups.google.com/g/kubernetes-security-announce/c/vPWYJ_L84m8
CVE: CVE-2023-36162
Published: 2023-07-03
Description: Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the add function in adminlist.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.zzcms.net/about/download.html; https://github.com/779789571/zzcms/blob/main/README.md; https://github.com/forget-code/zzcms/issues/6
CVE: CVE-2023-36183
Published: 2023-07-03
Description: Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/OpenImageIO/oiio/issues/3871; https://lists.debian.org/debian-lts-announce/2023/08/msg00005.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CPHVMLS2LYMLURWFL7CMZ3Y7UMW3M4AW/
CVE: CVE-2023-36222
Published: 2023-07-03
Description: Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the comment parameter in the article function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://bbs-go.com; https://github.com/mlogclub/bbs-go; https://github.com/mlogclub/bbs-go/issues/206
CVE: CVE-2023-36223
Published: 2023-07-03
Description: Cross Site Scripting vulnerability in mlogclub bbs-go v. 3.5.5. and before allows a remote attacker to execute arbitrary code via a crafted payload to the announcements parameter in the settings function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://bbs-go.com; https://github.com/mlogclub/bbs-go; https://github.com/mlogclub/bbs-go/issues/208
CVE: CVE-2023-36258
Published: 2023-07-03
Description: An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/hwchase17/langchain/issues/5872; https://github.com/hwchase17/langchain/issues/5872
CVE: CVE-2023-36262
Published: 2023-07-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2023-36291
Published: 2023-07-03
Description: Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the f_content parameter in the admin/page_new file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/maxsite/cms/issues/500; https://github.com/maxsite/cms/issues/500
CVE: CVE-2023-36377
Published: 2023-07-03
Description: Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/mtrojnar/osslsigncode/compare/2.2...2.3; https://github.com/mtrojnar/osslsigncode/releases/tag/2.3; https://lists.debian.org/debian-lts-announce/2023/12/msg00016.html
CVE: CVE-2023-36610
Published: 2023-07-03
Description: 
​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.


CVSS Score: 5.9 (MEDIUM)
CWE: CWE-331
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-36611
Published: 2023-07-03
Description: 
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-3395
Published: 2023-07-03
Description: 
​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with access to system files could open a file to load the document into memory, including sensitive information associated with document, such as password. The attacker could then obtain the plaintext password by using a memory viewer.


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256, CWE-312
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03; https://www.cisa.gov/news-events/ics-advisories/icsa-23-180-03
CVE: CVE-2023-22906
Published: 2023-07-04
Description: Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://github.com/nonamecoder/CVE-2023-22906; https://twitter.com/ayyappan162010/status/[PII_REDACTED]53000960; https://github.com/nonamecoder/CVE-2023-22906
CVE: CVE-2023-25516
Published: 2023-07-04
Description: 
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service.


CVSS Score: 7.1 (HIGH)
CWE: CWE-190, CWE-190
References: https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468; https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE: CVE-2023-25517
Published: 2023-07-04
Description: 
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering.


CVSS Score: 7.1 (HIGH)
CWE: CWE-285
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5468; https://nvidia.custhelp.com/app/answers/detail/a_id/5468
CVE: CVE-2023-25521
Published: 2023-07-04
Description: 




NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed.  A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.






CVSS Score: 7.5 (HIGH)
CWE: CWE-250, CWE-269
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5461; https://nvidia.custhelp.com/app/answers/detail/a_id/5461
CVE: CVE-2023-25522
Published: 2023-07-04
Description: 






NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format.  A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.








CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5461; https://nvidia.custhelp.com/app/answers/detail/a_id/5461
CVE: CVE-2023-25523
Published: 2023-07-04
Description: 


NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.




CVSS Score: 3.3 (LOW)
CWE: CWE-476, CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5469; https://nvidia.custhelp.com/app/answers/detail/a_id/5469
CVE: CVE-2023-30990
Published: 2023-07-04
Description: IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture.  IBM X-Force ID:  254036.
CVSS Score: 8.6 (HIGH)
CWE: CWE-94, CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/254036; https://www.ibm.com/support/pages/node/7008573; https://exchange.xforce.ibmcloud.com/vulnerabilities/254036
CVE: CVE-2022-32666
Published: 2023-07-04
Description: In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN[PII_REDACTED]4; Issue ID: GN[PII_REDACTED]4.
CVSS Score: 7.5 (HIGH)
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20689
Published: 2023-07-04
Description: In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664741; Issue ID: ALPS07664741.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20690
Published: 2023-07-04
Description: In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664735; Issue ID: ALPS07664735.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20691
Published: 2023-07-04
Description: In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664731; Issue ID: ALPS07664731.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20692
Published: 2023-07-04
Description: In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664720; Issue ID: ALPS07664720.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20693
Published: 2023-07-04
Description: In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07664711; Issue ID: ALPS07664711.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20748
Published: 2023-07-04
Description: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07536951; Issue ID: ALPS07536951.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20753
Published: 2023-07-04
Description: In rpmb, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07460390; Issue ID: ALPS07588667.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20754
Published: 2023-07-04
Description: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07588343.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20755
Published: 2023-07-04
Description: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20756
Published: 2023-07-04
Description: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07549928.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20757
Published: 2023-07-04
Description: In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20758
Published: 2023-07-04
Description: In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20759
Published: 2023-07-04
Description: In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20760
Published: 2023-07-04
Description: In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20761
Published: 2023-07-04
Description: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20766
Published: 2023-07-04
Description: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20767
Published: 2023-07-04
Description: In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20768
Published: 2023-07-04
Description: In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-843
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023
CVE: CVE-2023-20771
Published: 2023-07-04
Description: In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-362, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/July-2023; https://corp.mediatek.com/product-security-bulletin/July-2023