stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2023-32981 (severity: HIGH, weakness: CWE-787)
An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able to provide crafted archives as parameters to create or replace arbitrary files on the agent file system with attacker-specified content.
CVE-2023-32982 (severity: MEDIUM, weakness: CWE-311)
Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier stores extra variables unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVE-2023-32983 (severity: MEDIUM, weakness: CWE-312)
Jenkins Ansible Plugin 204.v8191fd551eb_f and earlier does not mask extra variables displayed on the configuration form, increasing the potential for attackers to observe and capture them.
CVE-2023-32984 (severity: MEDIUM, weakness: CWE-79)
Jenkins TestNG Results Plugin 730.v4c5283037693 and earlier does not escape several values that are parsed from TestNG report files and displayed on the plugin's test information pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a crafted TestNG report file.
CVE-2023-32985 (severity: MEDIUM, weakness: CWE-22)
Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVE-2023-32986 (severity: HIGH, weakness: CWE-732)
Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File Parameters, allowing attackers with Item/Configure permission to create or replace arbitrary files on the Jenkins controller file system with attacker-specified content.
CVE-2023-32987 (severity: HIGH, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attackers to connect to an attacker-specified LDAP server using attacker-specified credentials.
CVE-2023-32988 (severity: MEDIUM, weakness: CWE-522)
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
CVE-2023-32989 (severity: HIGH, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.
CVE-2023-3299 (severity: LOW, weakness: CWE-201)
HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
CVE-2023-32990 (severity: MEDIUM, weakness: CWE-732)
A missing permission check in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified Azure Cloud server using attacker-specified credentials IDs obtained through another method.
CVE-2023-32991 (severity: HIGH, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML, or parse a local file on the Jenkins controller as XML.
CVE-2023-32992 (severity: HIGH, weakness: CWE-732)
Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the response as XML, or parse a local file on the Jenkins controller as XML.
CVE-2023-32993 (severity: MEDIUM, weakness: CWE-345)
Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.
CVE-2023-32994 (severity: LOW, weakness: CWE-295)
Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused using a man-in-the-middle attack to intercept these connections.
CVE-2023-32995 (severity: HIGH, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.
CVE-2023-32996 (severity: MEDIUM, weakness: CWE-276)
A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to send an HTTP POST request with JSON body containing attacker-specified content, to miniOrange's API for sending emails.
CVE-2023-32997 (severity: HIGH, weakness: CWE-384)
Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login.
CVE-2023-32998 (severity: HIGH, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
CVE-2023-32999 (severity: MEDIUM, weakness: CWE-276)
A missing permission check in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL and send an HTTP POST request with a JSON payload consisting of attacker-specified credentials.
CVE-2023-3300 (severity: MEDIUM, weakness: CWE-266)
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1.
CVE-2023-33000 (severity: HIGH, weakness: CWE-522)
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them.
CVE-2023-33001 (severity: HIGH, weakness: CWE-532)
Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
CVE-2023-33002 (severity: MEDIUM, weakness: CWE-79)
Jenkins TestComplete support Plugin 2.8.1 and earlier does not escape the TestComplete project name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2023-33003 (severity: MEDIUM, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.
CVE-2023-33004 (severity: MEDIUM, weakness: CWE-732)
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.
CVE-2023-33005 (severity: MEDIUM, weakness: CWE-613)
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.
CVE-2023-33006 (severity: MEDIUM, weakness: CWE-352)
A cross-site request forgery (CSRF) vulnerability in Jenkins WSO2 Oauth Plugin 1.0 and earlier allows attackers to trick users into logging in to the attacker's account.
CVE-2023-33007 (severity: MEDIUM, weakness: CWE-79)
Jenkins LoadComplete support Plugin 1.0 and earlier does not escape the LoadComplete test name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2023-33008 (severity: MEDIUM, weakness: CWE-502)
Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal. This issue affects Apache Johnzon: through 1.2.20.
CVE-2023-33009 (severity: CRITICAL, weakness: CWE-120)
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
CVE-2023-3301 (severity: MEDIUM, weakness: CWE-617)
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVE-2023-33010 (severity: CRITICAL, weakness: CWE-120)
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
CVE-2023-33011 (severity: HIGH, weakness: CWE-134)
A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands by using a crafted PPPoE configuration on an affected device when the cloud management mode is enabled.
CVE-2023-33012 (severity: HIGH, weakness: CWE-78)
A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.10 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.10 through 5.36 Patch 2, and VPN series firmware versions 5.00 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands by using a crafted GRE configuration when the cloud management mode is enabled.
CVE-2023-33013 (severity: HIGH, weakness: CWE-78)
A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an authenticated attacker to execute some OS commands remotely by sending a crafted HTTP request.
CVE-2023-33014 (severity: MEDIUM, weakness: CWE-20)
Information disclosure in Core services while processing a Diag command.
CVE-2023-33015 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.
CVE-2023-33016 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN firmware while parsing MLO (multi-link operation).
CVE-2023-33017 (severity: HIGH, weakness: CWE-120)
Memory corruption in Boot while running a ListVars test in UEFI Menu during boot.
CVE-2023-33018 (severity: HIGH, weakness: CWE-680)
Memory corruption while using the UIM diag command to get the operators name.
CVE-2023-33019 (severity: HIGH, weakness: CWE-285)
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
CVE-2023-3302 (severity: MEDIUM, weakness: CWE-1236)
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.
CVE-2023-33020 (severity: HIGH, weakness: CWE-285)
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
CVE-2023-33021 (severity: HIGH, weakness: CWE-416)
Memory corruption in Graphics while processing user packets for command submission.
CVE-2023-33022 (severity: HIGH, weakness: CWE-680)
Memory corruption in HLOS while invoking IOCTL calls from user-space.
CVE-2023-33023 (severity: HIGH, weakness: CWE-120)
Memory corruption while processing finish_sign command to pass a rsp buffer.
CVE-2023-33024 (severity: HIGH, weakness: CWE-120)
Memory corruption while sending SMS from AP firmware.
CVE-2023-33025 (severity: CRITICAL, weakness: CWE-120)
Memory corruption in Data Modem when a non-standard SDP body, during a VOLTE call.
CVE-2023-33026 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing a NAN management frame.
CVE-2023-33027 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing rsn ies.
CVE-2023-33028 (severity: CRITICAL, weakness: CWE-121)
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.
CVE-2023-33029 (severity: HIGH, weakness: CWE-416)
Memory corruption in DSP Service during a remote call from HLOS to DSP.
CVE-2023-3303 (severity: MEDIUM, weakness: CWE-284)
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
CVE-2023-33030 (severity: HIGH, weakness: CWE-120)
Memory corruption in HLOS while running playready use-case.
CVE-2023-33031 (severity: HIGH, weakness: CWE-120)
Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.
CVE-2023-33032 (severity: HIGH, weakness: CWE-190)
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
CVE-2023-33033 (severity: HIGH, weakness: CWE-823)
Memory corruption in Audio during playback with speaker protection.
CVE-2023-33034 (severity: HIGH, weakness: CWE-195)
Memory corruption while parsing the ADSP response command.
CVE-2023-33035 (severity: HIGH, weakness: CWE-120)
Memory corruption while invoking callback function of AFE from ADSP.
CVE-2023-33036 (severity: MEDIUM, weakness: CWE-476)
Permanent DOS in Hypervisor while untrusted VM without PSCI support makes a PSCI call.
CVE-2023-33037 (severity: MEDIUM, weakness: CWE-310)
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
CVE-2023-33038 (severity: HIGH, weakness: CWE-190)
Memory corruption while receiving a message in Bus Socket Transport Server.
CVE-2023-33039 (severity: HIGH, weakness: CWE-416)
Memory corruption in Automotive Display while destroying the image handle created using connected display driver.
CVE-2023-3304 (severity: MEDIUM, weakness: CWE-284)
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
CVE-2023-33040 (severity: HIGH, weakness: CWE-126)
Transient DOS in Data Modem during DTLS handshake.
CVE-2023-33041 (severity: HIGH, weakness: CWE-617)
Under certain scenarios the WLAN Firmware will reach an assertion due to state confusion while looking up peer ids.
CVE-2023-33042 (severity: HIGH, weakness: CWE-20)
Transient DOS in Modem after RRC Setup message is received.
CVE-2023-33043 (severity: HIGH, weakness: CWE-617)
Transient DOS in Modem when a Beam switch request is made with a non-configured BWP.
CVE-2023-33044 (severity: HIGH, weakness: CWE-617)
Transient DOS in Data modem while handling TLB control messages from the Network.
CVE-2023-33045 (severity: CRITICAL, weakness: CWE-120)
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.
CVE-2023-33046 (severity: HIGH, weakness: CWE-367)
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
CVE-2023-33047 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing no-inherit IES.
CVE-2023-33048 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing t2lm buffers.
CVE-2023-33049 (severity: HIGH, weakness: CWE-401)
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
CVE-2023-3305 (severity: HIGH, weakness: CWE-284)
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.
CVE-2023-33053 (severity: HIGH, weakness: CWE-129)
Memory corruption in Kernel while parsing metadata.
CVE-2023-33054 (severity: CRITICAL, weakness: CWE-287)
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data.
CVE-2023-33055 (severity: HIGH, weakness: CWE-120)
Memory Corruption in Audio while invoking callback function in driver from ADSP.
CVE-2023-33056 (severity: HIGH, weakness: CWE-476)
Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.
CVE-2023-33057 (severity: HIGH, weakness: CWE-20)
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
CVE-2023-33058 (severity: CRITICAL, weakness: CWE-126)
Information disclosure in Modem while processing SIB5.
CVE-2023-33059 (severity: HIGH, weakness: CWE-191)
Memory corruption in Audio while processing the VOC packet data from ADSP.
CVE-2023-3306 (severity: CRITICAL, weakness: CWE-284)
A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-231802 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-33060 (severity: MEDIUM, weakness: CWE-126)
Transient DOS in Core when DDR memory check is called while DDR is not initialized.
CVE-2023-33061 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
CVE-2023-33062 (severity: HIGH, weakness: CWE-126)
Transient DOS in WLAN Firmware while parsing a BTM request.
CVE-2023-33063 (severity: HIGH, weakness: CWE-416)
Memory corruption in DSP Services during a remote call from HLOS to DSP.
CVE-2023-33064 (severity: MEDIUM, weakness: CWE-126)
Transient DOS in Audio when invoking callback function of ASM driver.
CVE-2023-33065 (severity: HIGH, weakness: CWE-126)
Information disclosure in Audio while accessing AVCS services from ADSP payload.
CVE-2023-33066 (severity: HIGH, weakness: CWE-823)
Memory corruption in Audio while processing RT proxy port register driver.
CVE-2023-33067 (severity: HIGH, weakness: CWE-823)
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
CVE-2023-33068 (severity: HIGH, weakness: CWE-120)
Memory corruption in Audio while processing IIR config data from AFE calibration block.
CVE-2023-33069 (severity: HIGH, weakness: CWE-120)
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
CVE-2023-3307 (severity: HIGH, weakness: CWE-89)
A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The manipulation of the argument search_query leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231803. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-33070 (severity: MEDIUM, weakness: CWE-287)
Transient DOS in Automotive OS due to improper authentication to the secure IO calls.
CVE-2023-33071 (severity: HIGH, weakness: CWE-284)
Memory corruption in Automotive OS whenever untrusted apps try to access HAb for graphics functionalities.
CVE-2023-33072 (severity: HIGH, weakness: CWE-120)
Memory corruption in Core while processing control functions.
CVE-2023-33074 (severity: HIGH, weakness: CWE-416)
Memory corruption in Audio when SSR event is triggered after music playback is stopped.
CVE-2023-33076 (severity: HIGH, weakness: CWE-16)
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
CVE-2023-33077 (severity: HIGH, weakness: CWE-120)
Memory corruption in HLOS while converting from authorization token to HIDL vector.
CVE-2023-33078 (severity: MEDIUM, weakness: CWE-126)
Information Disclosure while processing IOCTL request in FastRPC.
CVE-2023-33079 (severity: HIGH, weakness: CWE-823)
Memory corruption in Audio while running invalid audio recording from ADSP.
CVE-2023-3308 (severity: HIGH, weakness: CWE-502)
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.
CVE-2023-33080 (severity: HIGH, weakness: CWE-126)
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
CVE-2023-33081 (severity: HIGH, weakness: CWE-126)
Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.
CVE-2023-33082 (severity: CRITICAL, weakness: CWE-120)
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.
CVE-2023-33083 (severity: CRITICAL, weakness: CWE-120)
Memory corruption in WLAN Host while processing RRM beacon on the AP.
CVE-2023-33084 (severity: HIGH, weakness: CWE-401)
Transient DOS while processing IE fragments from server during DTLS handshake.
CVE-2023-33085 (severity: HIGH, weakness: CWE-120)
Memory corruption in wearables while processing data from AON.
CVE-2023-33086 (severity: HIGH, weakness: CWE-401)
Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.
CVE-2023-33087 (severity: HIGH, weakness: CWE-120)
Memory corruption in Core while processing RX intent request.
CVE-2023-33088 (severity: HIGH, weakness: CWE-476)
Memory corruption when processing cmd parameters while parsing vdev.
CVE-2023-33089 (severity: HIGH, weakness: CWE-476)
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVE-2023-3309 (severity: MEDIUM, weakness: CWE-79)
A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.
CVE-2023-33090 (severity: MEDIUM, weakness: CWE-126)
Transient DOS while processing channel information for speaker protection v2 module in ADSP.
CVE-2023-33092 (severity: HIGH, weakness: CWE-120)
Memory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
CVE-2023-33094 (severity: HIGH, weakness: CWE-416)
Memory corruption while running VK synchronization with KASAN enabled.