2023

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/bac

An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impac

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via c

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via c

An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified im

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via c

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts vi

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts v

An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially explo

Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by def

In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actio

An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cf

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpret

Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Se

Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.  The configuration option p

A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and pote

A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, a

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Se

Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Outlook Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Windows Server Service Security Feature Bypass Vulnerability

Windows SMB Witness Service Security Feature Bypass Vulnerability

Windows Hello Remote Code Execution Vulnerability

Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Windows Container Manager Service Elevation of Privilege Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability

Windows Bus Filter Driver Elevation of Privilege Vulnerability

Windows Collaborative Translation Framework Elevation of Privilege Vulnerability

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Filtering Platform Elevation of Privilege Vulnerability

iSCSI Target WMI Provider Remote Code Execution Vulnerability