Security Vulnerabilities - CVEs Published In May 2024
Cracking vulnerability in the OS security module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
6.8
EPSS Score
0.0
Published
2024-05-14
Privilege escalation vulnerability in the account module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
6.2
EPSS Score
0.0
Published
2024-05-14
Race condition vulnerability in the binder driver module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
8.4
EPSS Score
0.0
Published
2024-05-14
Out-of-bounds access vulnerability in the memory module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
5.6
EPSS Score
0.0
Published
2024-05-14
Denial of service (DoS) vulnerability in the AMS module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
6.2
EPSS Score
0.0
Published
2024-05-14
Permission verification vulnerability in the wpa_supplicant module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-05-14
Insufficient verification vulnerability in the baseband module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-05-14
Insufficient verification vulnerability in the system sharing pop-up module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
3.3
EPSS Score
0.001
Published
2024-05-14
Permission verification vulnerability in the system sharing pop-up module
Impact: Successful exploitation of this vulnerability will affect availability.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-05-14
Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Prior to 0.150.6, lobe-chat had an unauthorized Server-Side Request Forgery vulnerability in the /api/proxy endpoint. An attacker can construct malicious requests to cause Server-Side Request Forgery without logging in, attack intranet services, and leak sensitive information.
CVSS Score
9.0
EPSS Score
0.537
Published
2024-05-14