2023

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/p

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media

A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability af

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affec

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability h

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnera

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file upl

Microsoft Publisher Remote Code Execution Vulnerability

Microsoft Publisher Remote Code Execution Vulnerability

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can le

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an ou

The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c i

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings,

jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to sen

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() f

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may

A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause b

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud S

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instan

RedTeam Pentesting discovered that the web interface of STARFACE as well as its REST API allows authentication using the

Adobe Animate versions 22.0.9 (and earlier) and 23.0.1 (and earlier) are affected by a Use After Free vulnerability that

Some access control products are vulnerable to a session hijacking attack because the product does not update the sessio

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

In doInBackground of NotificationContentInflater.java, there is a possible temporary denial or service due to long runni

In bindPlayer of MediaControlPanel.java, there is a possible launch arbitrary activity in SysUI due to Unsafe Intent. Th

In onNullBinding of CallRedirectionProcessor.java, there is a possible long lived connection due to improper input valid

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to imp

In checkKeyIntentParceledCorrectly() of ActivityManagerService.java, there is a possible bypass of Parcel Mismatch mitig

In getFullScreenIntentDecision of NotificationInterruptStateProviderImpl.java, there is a possible activity launch while

In various functions of AppStandbyController.java, there is a possible way to break manageability scenarios due to a log