deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-6467
Published: 2023-12-02
Description: A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /Websquare/likeClickComment/ of the component Comment Like Handler. The manipulation leads to improper enforcement of a single, unique action. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-246617 was assigned to this vulnerability.
CVSS Score: 3.1 (LOW)
CWE: CWE-837
References: http://39.106.130.187/wenjian/2.html; https://vuldb.com/?ctiid.246617; https://vuldb.com/?id.246617
CVE: CVE-2023-6472
Published: 2023-12-02
Description: A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api.cls.php of the component Content Section Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-246629 was assigned to this vulnerability.
CVSS Score: 2.4 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.246629; https://vuldb.com/?id.246629; https://www.yuque.com/u39339523/el4dxs/vs8kw5gql9646xx4
CVE: CVE-2023-6473
Published: 2023-12-02
Description: A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.php. The manipulation of the argument quiz_taker/year_section leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-246639.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://vuldb.com/?ctiid.246639; https://vuldb.com/?id.246639; https://www.yuque.com/u39339523/el4dxs/mmvgxz2hgb5na0aw
CVE: CVE-2023-47100
Published: 2023-12-02
Description: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
CVE: CVE-2023-6474
Published: 2023-12-03
Description: A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file manage-phlebotomist.php. The manipulation of the argument pid leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-246640.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/dhabaleshwar/niv_testing_csrf/blob/main/exploit.md; https://vuldb.com/?ctiid.246640; https://vuldb.com/?id.246640
CVE: CVE-2023-49926
Published: 2023-12-03
Description: app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/dc73287ee2000476e3a5800ded402825ca10f7e8; https://github.com/MISP/MISP/compare/v2.4.178...v2.4.179; https://github.com/MISP/MISP/commit/dc73287ee2000476e3a5800ded402825ca10f7e8
CVE: CVE-2018-25094
Published: 2023-12-03
Description: A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This issue affects some unknown processing of the file ckeditor/filemanager/browser/default/image.php. The manipulation of the argument fid with the input ../../../etc/passwd leads to path traversal: '../filedir'. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The identifier of the patch is 9d9618422b980335bb30be612ea90f4f56cb992c. It is recommended to upgrade the affected component. The identifier VDB-246641 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-24, CWE-22
References: https://github.com/59160781/project/commit/9d9618422b980335bb30be612ea90f4f56cb992c; https://vuldb.com/?ctiid.246641; https://vuldb.com/?id.246641
CVE: CVE-2020-36768
Published: 2023-12-03
Description: A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 07c0cdf36cf6a4345086d07b54423723a496af5e. It is recommended to apply a patch to fix this issue. VDB-246642 is the identifier assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/rl-institut/NESP2/commit/07c0cdf36cf6a4345086d07b54423723a496af5e; https://github.com/rl-institut/NESP2/issues/334; https://github.com/rl-institut/NESP2/pull/333
CVE: CVE-2023-45178
Published: 2023-12-03
Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used.  IBM X-Force ID:  268073.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/268073; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7087207
CVE: CVE-2022-4957
Published: 2023-12-03
Description: A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. Upgrading to version 5.2.5 is able to address this issue. The patch is named a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-246643.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/librespeed/speedtest/commit/a85f2c086f3449dffa8fe2edb5e2ef3ee72dc0e9; https://github.com/librespeed/speedtest/releases/tag/5.2.5; https://vuldb.com/?ctiid.246643
CVE: CVE-2023-49946
Published: 2023-12-03
Description: In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked. This allows remote attackers to read private issues, read private pull requests, delete issues, and perform other unauthorized actions.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-732
References: https://about.gitea.com/security; https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md; https://forgejo.org/2023-11-release-v1-20-5-1/
CVE: CVE-2023-49947
Published: 2023-12-03
Description: Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://codeberg.org/forgejo/forgejo/commit/44df78edd40076b349d50dc5fb02af417a44cfab; https://forgejo.org/2023-11-release-v1-20-5-1/; https://codeberg.org/forgejo/forgejo/commit/44df78edd40076b349d50dc5fb02af417a44cfab
CVE: CVE-2023-49948
Published: 2023-12-03
Description: Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension) to a URL.
CVSS Score: 5.3 (MEDIUM)
References: https://codeberg.org/forgejo/forgejo/commit/d7408d8b0b04afd2a3c8e23cc908e7bd3849f34d; https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md; https://forgejo.org/2023-11-release-v1-20-5-1/
CVE: CVE-2023-40692
Published: 2023-12-04
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions.  IBM X-Force ID:  264807.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/264807; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7087157
CVE: CVE-2022-48462
Published: 2023-12-04
Description: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2022-48463
Published: 2023-12-04
Description: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2022-48464
Published: 2023-12-04
Description: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-38003
Published: 2023-12-04
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to.  IBM X-Force ID:  260214.
CVSS Score: 7.2 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260214; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/7078681
CVE: CVE-2023-42671
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42672
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42673
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42674
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42675
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42676
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42677
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42678
Published: 2023-12-04
Description: In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42679
Published: 2023-12-04
Description: In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42680
Published: 2023-12-04
Description: In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42681
Published: 2023-12-04
Description: In ion service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42682
Published: 2023-12-04
Description: In gsp driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42683
Published: 2023-12-04
Description: In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42684
Published: 2023-12-04
Description: In gsp driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42685
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42686
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42687
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42688
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42689
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42690
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42691
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42692
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42693
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42694
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42695
Published: 2023-12-04
Description: In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049
CVE: CVE-2023-42696
Published: 2023-12-04
Description: In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049; https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]03266049