Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,867 results · page 24 of 38
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42691 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42690 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42689 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42688 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42687 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42686 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible missing permission check.CVE-2023-42685 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible out of bounds write due to a missing bounds check.CVE-2022-48464 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible out of bounds write due to a missing bounds check.CVE-2022-48463 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 3, 2023In wifi service, there is a possible out of bounds write due to a missing bounds check.CVE-2022-48462 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 30, 2023Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.CVE-2023-48964 · Network & remote access · Tenda · reported by MITREHigh 7.5
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/WifiMacFilterSet.
- Product
- I6 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 30, 2023Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.CVE-2023-48963 · Network & remote access · Tenda · reported by MITREHigh 7.5
Tenda i6 V1.0.0.8(3856) is vulnerable to Buffer Overflow via /goform/wifiSSIDget.
- Product
- I6 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 29, 2023Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.CVE-2023-45484 · Network & remote access · Tenda · reported by MITRECritical 9.8
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGuestBasic.
- Product
- Ac10 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 26, 2023A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830.CVE-2023-6304 · Other software · Tecno · reported by VulDBHigh 7.2
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goform_get_cmd_process of the component Ping Tool. The manipulation of the argument url leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-246130 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
- Product
- 4G Portable WiFi TR118
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddrive.google.comvuldb.com
Nov 7, 2023Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameteCVE-2023-47455 · Network & remote access · tenda · reported by MITRECritical 9.1
Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained from http request parameter schedStartTime and schedEndTime without checking their size.
- Product
- ax1806_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2023In wifi service, there is a possible out of bounds write due to a missing bounds check.CVE-2022-48455 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 1, 2023In wifi service, there is a possible out of bounds write due to a missing bounds check.CVE-2022-48454 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed
- Product
- SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 31, 2023TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.CVE-2023-46978 · Other software · totolink · reported by MITREHigh 7.5
TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without authentication.
- Product
- x6000r_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 30, 2023In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value.CVE-2023-21397 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Oct 13, 2023Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.CVE-2023-4257 · Other software · zephyrproject-rtos · reported by vulnerabilities@zephyrproject.orgHigh 7.6
Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.
- Product
- Zephyr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Oct 6, 2023In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation.CVE-2023-21252 · Computers, phones & browsers · Google · reported by security@android.comMedium 5.5
In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordandroid.googlesource.comandroid.googlesource.com
Sep 27, 2023Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set fuCVE-2023-44023 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
- Product
- ac10u
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2023Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet functionCVE-2023-44020 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function.
- Product
- ac10u
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2023Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter functionCVE-2023-44016 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
- Product
- ac10u_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2023Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi functionCVE-2023-44015 · Network & remote access · tenda · reported by MITRECritical 9.8
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi function.
- Product
- ac10u_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 25, 2023Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.CVE-2023-4259 · Other software · zephyrproject-rtos · reported by vulnerabilities@zephyrproject.orgHigh 7.1
Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.
- Product
- Zephyr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Sep 22, 2023Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authentiCVE-2023-41029 · Other software · Juplink · reported by disclosures@exodusintel.comHigh 8
Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.
- Product
- RX4-1500
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.exodusintel.comblog.exodusintel.com
Sep 22, 2023Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attackeCVE-2023-41027 · Other software · Juplink · reported by disclosures@exodusintel.comHigh 8
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.
- Product
- RX4-1500
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.exodusintel.comblog.exodusintel.com
Sep 21, 2023D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi.CVE-2023-43236 · Other software · dlink · reported by MITRECritical 9.8
D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi.
- Product
- dir-816_a2_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2023D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings.CVE-2023-43235 · Network & remote access · d-link · reported by MITRECritical 9.8
D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings.
- Product
- dir-823g
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 6, 2023Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to chCVE-2023-30718 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comMedium 4
Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting.
- Product
- Samsung Mobile Devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38464 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38463 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38462 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38461 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38460 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38459 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38458 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38457 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38456 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38455 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privilegesCVE-2023-38454 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38453 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38452 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38451 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38450 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privilegesCVE-2023-38449 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comHigh 7.8
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38448 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38447 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2023In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privilegesCVE-2023-38446 · Other software · Unisoc (Shanghai) Technologies Co., Ltd. · reported by security@unisoc.comMedium 5.5
In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges
- Product
- SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.