CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2023-44301
https://notcve.org/view.php?id=CVE-2023-44301
Exploitation may lead to information disclosure, session theft, or client-side request forgery. • https://www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.4EPSS: 0%CPEs: 11EXPL: 0CVE-2023-32858
https://notcve.org/view.php?id=CVE-2023-32858
In GZ, there is a possible information disclosure due to a missing data erasing. This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/December-2023 •
CVSS: 4.4EPSS: 0%CPEs: 16EXPL: 0CVE-2023-32857
https://notcve.org/view.php?id=CVE-2023-32857
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/December-2023 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 16EXPL: 0CVE-2023-32856
https://notcve.org/view.php?id=CVE-2023-32856
This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/December-2023 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 4EXPL: 0CVE-2023-32852
https://notcve.org/view.php?id=CVE-2023-32852
In cameraisp, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/December-2023 •