2023

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, an

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Defender Denial of Service Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

Windows Sysmain Service Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

DHCP Server Service Denial of Service Vulnerability

Windows Bluetooth Driver Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Azure Connected Machine Agent Elevation of Privilege Vulnerability

Windows DNS Spoofing Vulnerability

Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

Windows Media Remote Code Execution Vulnerability

The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy ar

In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have ce

An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authe

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain

The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.

In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attac

In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is select

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevat

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDC

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly v

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versi

Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to crea

A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi

A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versi

Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacke

Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker se