2023

Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated a

Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker se

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a

Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.ph

Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authe

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.

Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and ca

SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventu

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may

In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locke

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPad

Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as s

A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands a

Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticat

A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows rem

Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker wit

@koa/cors npm provides Cross-Origin Resource Sharing (CORS) for koa, a web framework for Node.js. Prior to version 5.0.0

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process wit

The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an

SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authe

Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in m

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attack

An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder

This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" inpu

An issue was discovered in Zammad before 6.2.0. Due to lack of rate limiting in the "email address verification" feature

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overfl