Total
419404 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-41828 | 2026-06-17 | N/A | 4.4 MEDIUM | ||
| An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider. | |||||
| CVE-2023-41827 | 2026-06-17 | N/A | 5.1 MEDIUM | ||
| An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI. | |||||
| CVE-2023-41826 | 2026-06-17 | N/A | 5.1 MEDIUM | ||
| A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software components without permission. | |||||
| CVE-2023-41825 | 2026-06-17 | N/A | 2.8 LOW | ||
| A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files. | |||||
| CVE-2023-41824 | 2026-06-17 | N/A | 2.8 LOW | ||
| An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data. | |||||
| CVE-2023-41823 | 2026-06-17 | N/A | 4.4 MEDIUM | ||
| An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities. | |||||
| CVE-2023-41822 | 2026-06-17 | N/A | 4.8 MEDIUM | ||
| An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands. | |||||
| CVE-2023-41821 | 2026-06-17 | N/A | 5.0 MEDIUM | ||
| A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information. | |||||
| CVE-2023-41820 | 2026-06-17 | N/A | 5.0 MEDIUM | ||
| An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices. | |||||
| CVE-2023-41819 | 2026-06-17 | N/A | 6.1 MEDIUM | ||
| A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers. | |||||
| CVE-2023-41818 | 2026-06-17 | N/A | 5.0 MEDIUM | ||
| An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs. | |||||
| CVE-2023-41817 | 2026-06-17 | N/A | 2.8 LOW | ||
| An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information. | |||||
| CVE-2023-41816 | 2026-06-17 | N/A | 5.0 MEDIUM | ||
| An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database. | |||||
| CVE-2023-41815 | 1 Pandorafms | 1 Pandora Fms | 2026-06-17 | N/A | 7.5 HIGH |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Malicious code could be executed in the File Manager section. This issue affects Pandora FMS: from 700 through 774. | |||||
| CVE-2023-41814 | 1 Pandorafms | 1 Pandora Fms | 2026-06-17 | N/A | 3.7 LOW |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Through an HTML payload (iframe tag) it is possible to carry out XSS attacks when the user receiving the messages opens their notifications. This issue affects Pandora FMS: from 700 through 774. | |||||
| CVE-2023-41813 | 1 Pandorafms | 1 Pandora Fms | 2026-06-17 | N/A | 3.0 LOW |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). Allows you to edit the Web Console user notification options. This issue affects Pandora FMS: from 700 through 774. | |||||
| CVE-2023-41812 | 1 Artica | 1 Pandora Fms | 2026-06-17 | N/A | 5.7 MEDIUM |
| Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not Properly Constrained by ACLs. This vulnerability allowed PHP executable files to be uploaded through the file manager. This issue affects Pandora FMS: from 700 through 773. | |||||
| CVE-2023-41811 | 1 Artica | 1 Pandora Fms | 2026-06-17 | N/A | 5.3 MEDIUM |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed Javascript code to be executed in the news section of the web console. This issue affects Pandora FMS: from 700 through 773. | |||||
| CVE-2023-41810 | 1 Artica | 1 Pandora Fms | 2026-06-17 | N/A | 4.0 MEDIUM |
| Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerability allowed Javascript code to be executed in some Widgets' text box. This issue affects Pandora FMS: from 700 through 773. | |||||
| CVE-2023-41808 | 1 Artica | 1 Pandora Fms | 2026-06-17 | N/A | 8.5 HIGH |
| Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows an unauthorised user to escalate and read sensitive files as if they were root. This issue affects Pandora FMS: from 700 through 773. | |||||