2023

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to downlo

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell m

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configu

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by exec

Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message i

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive informati

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to sc

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compac

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary f

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a n

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which ma

Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules

All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.

The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to down

Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers t

py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to exe

requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attacker

An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.

A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Andr

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitiv

An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management system 3.1 thru

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provide

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up

calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users of cala

Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) conditi

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request.

Interactsh is an open-source tool for detecting out-of-band interactions. Domains configured with interactsh server prio

Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.

A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mi

** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions.

A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not ch

D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execu

A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escala

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local pri

Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI).

In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds

there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lea

In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer