2023

SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privileg

Milesight NCR/camera version 71.8.0.6-r5 allows authentication bypass through an unspecified method.

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NO

Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NO

TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow.

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC pr

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC pr

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC pr

Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC pr

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrar

AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer

AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI fl

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrar

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write

SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5

Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download

In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms

The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authe

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BrokenCrust This Day In History plugin <= 3.10.1 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPoperation SALERT – Fake Sales Notification WooCommerce p

NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.

NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Phan Chuong IP Metaboxes plugin <= 2.1.1.

A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to

LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an exe

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember plugin <= 4.0.1 versions.

All versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file u

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.

The Danfoss AK-EM100 stores login credentials in cleartext.

Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the se

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This

An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the datab

An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attack

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manip

An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privileg

An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks

schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could perm

Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, ac