First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-29743

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.zmtqsh.com/Broken Link
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29743/CVE%20detail.mdExploit, Third Party Advisory
https://play.google.com/store/apps/details?id=com.icoolme.android.weatherProduct
http://www.zmtqsh.com/Broken Link
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29743/CVE%20detail.mdExploit, Third Party Advisory
https://play.google.com/store/apps/details?id=com.icoolme.android.weatherProduct

Timeline

Published: May 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-297457.1An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating th CVE-2023-297469.8An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreferen CVE-2023-297479.8Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the Sh CVE-2023-297487.5Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modify the SharedPreferen CVE-2023-297497.8An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the CVE-2023-29755.3Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthentic CVE-2023-297515.5An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the S CVE-2023-297527.8An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipul CVE-2023-297535.5An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreferenc CVE-2023-297557.8An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPr CVE-2023-297565.5An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPre CVE-2023-297577.8An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating th