Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2023-10-31 CVE-2023-37833 Improper Input Validation vulnerability in Elenos Etg150 Firmware 3.12
Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed by privileged users.
network
low complexity
elenos CWE-20
2.7
2023-10-31 CVE-2023-43295 Cross-Site Request Forgery (CSRF) vulnerability in Clickstudios Passwordstate 9.7
Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execute arbitrary code via a crafted request.
network
low complexity
clickstudios CWE-352
3.5
2023-10-31 CVE-2023-5862 Unspecified vulnerability in Hamza417 Inure
Missing Authorization in GitHub repository hamza417/inure prior to Build95.
local
low complexity
hamza417
3.3
2023-10-30 CVE-2023-5349 Memory Leak vulnerability in multiple products
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick.
local
low complexity
rmagick fedoraproject CWE-401
3.3
2023-10-30 CVE-2023-21345 Information Exposure Through Discrepancy vulnerability in Google Android
In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
3.3
2023-10-30 CVE-2023-21346 Information Exposure Through Discrepancy vulnerability in Google Android
In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
3.3
2023-10-30 CVE-2023-21348 Information Exposure Through Discrepancy vulnerability in Google Android
In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
3.3
2023-10-30 CVE-2023-21349 Information Exposure Through Discrepancy vulnerability in Google Android
In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure.
local
low complexity
google CWE-203
3.3
2023-10-27 CVE-2023-40127 Unspecified vulnerability in Google Android
In multiple locations, there is a possible way to access screenshots due to a confused deputy.
local
low complexity
google
3.3
2023-10-27 CVE-2023-40134 Unspecified vulnerability in Google Android 12.0/12.1/13.0
In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy.
local
low complexity
google
3.3