2023

Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.

A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function ma

The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensi

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-d

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the cus

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via

ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.

Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted

HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, int

SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actio

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of

An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via

An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.ph

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Pa

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 version

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasu

In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code du

In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea

In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lea

In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu

In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This

In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy

In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This cou

In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused depu

In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local es

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. Th

In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could

In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could l

In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. Th

In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused

In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This c

In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input

In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions du

An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) ca

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alkaweb Eonet Manual User Approve plugin <= 2.1.3 vers

An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment

An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.

An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.

A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by t

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation M

In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used inste

In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many