CVE-2023-20000 to CVE-2023-20999

35 CVEs with public proof-of-concept exploits.

• CVE-2023-200251 PoCA vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an…
• CVE-2023-200482 PoCsA vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote…
• CVE-2023-200523 PoCsOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of…
• CVE-2023-200732 PoCsCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability
• CVE-2023-201101 PoCCisco Smart Software Manager On-Prem SQL Injection Vulnerability
• CVE-2023-201261 PoCCisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability
• CVE-2023-201782 PoCsA vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client…
• CVE-2023-2019827 PoCsKEVCisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We…
• CVE-2023-202091 PoCA vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS)…
• CVE-2023-202735 PoCsKEVA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the…
• CVE-2023-205622 PoCsInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned…
• CVE-2023-205641 PoCInsufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform…
• CVE-2023-205691 PoCA side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in…
• CVE-2023-205731 PoCDebug Exception Delivery in Secure Nested Paging
• CVE-2023-205982 PoCsAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain…
• CVE-2023-207021 PoCIn 5G NRLC, there is a possible invalid memory access due to lack of error handling. This could lead to remote denial of service, if UE…
• CVE-2023-208601 PoCSpring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the…
• CVE-2023-208641 PoCVMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to…
• CVE-2023-208691 PoCVMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality…
• CVE-2023-208721 PoCVMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.
• CVE-2023-208878 PoCsKEVAria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations…
• CVE-2023-208881 PoCAria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria…
• CVE-2023-208891 PoCAria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria…
• CVE-2023-209021 PoCTiming attack risk in Harbor
• CVE-2023-209041 PoCIn getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mismatch in the code…
• CVE-2023-209091 PoCIn multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to…
• CVE-2023-209111 PoCIn addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource…
• CVE-2023-209182 PoCsIn getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no…
• CVE-2023-209211 PoCIn onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility services due to a…
• CVE-2023-209331 PoCIn several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local…
• CVE-2023-209387 PoCsIn binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to…
• CVE-2023-209431 PoCIn clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error…
• CVE-2023-209441 PoCIn run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to…
• CVE-2023-209551 PoCIn onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications…
• CVE-2023-209631 PoCKEVIn WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution…