Security Vulnerabilities - CVEs Published In May 2023
Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-05-04
Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory.
CVSS Score
6.0
EPSS Score
0.0
Published
2023-05-04
Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.
CVSS Score
8.2
EPSS Score
0.0
Published
2023-05-04
Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.
CVSS Score
5.7
EPSS Score
0.0
Published
2023-05-04
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVSS Score
5.6
EPSS Score
0.007
Published
2023-05-04
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVSS Score
5.6
EPSS Score
0.007
Published
2023-05-04
Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-05-04
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PB SEO Friendly Images plugin <= 4.0.5 versions.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-05-04
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD plugin <= 3.1.5 versions.
CVSS Score
7.1
EPSS Score
0.001
Published
2023-05-04
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
CVSS Score
5.1
EPSS Score
0.0
Published
2023-05-04