Security Vulnerabilities - CVEs Published In September 2023
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score
3.5
EPSS Score
0.003
Published
2023-09-27
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score
4.4
EPSS Score
0.001
Published
2023-09-27
Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score
5.7
EPSS Score
0.002
Published
2023-09-27
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.
CVSS Score
3.3
EPSS Score
0.0
Published
2023-09-27
Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score
3.5
EPSS Score
0.003
Published
2023-09-27
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
CVSS Score
3.6
EPSS Score
0.0
Published
2023-09-27
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-09-27
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-09-27
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-09-27
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function.
CVSS Score
9.8
EPSS Score
0.003
Published
2023-09-27