2023

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with n

In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wit

The WP User Switch plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.2.

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an a

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an att

Avo is an open source ruby on rails admin panel creation framework. In affected versions some avo fields are vulnerable

Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to ope

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr

The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain so

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. T

hoppscotch is an open source API development ecosystem. In versions prior to 2023.4.5 the database password is exposed i

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vu

Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursi

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow

*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive informat

Microsoft Office Remote Code Execution Vulnerability

Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using

Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonat

Anonymous user may get the list of existing users managed by the application, that could ease further attacks (see CVE-2

The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!D

Improper Input Validation vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021, 2C

Improper Privilege Management vulnerability in ABB Ltd. ASPECT®-Enterprise on ASPECT®-Enterprise, Linux (2CQG103201S3021

OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a UR

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checki

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Captura up to 8.0.0. It has been declared as critical. This

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via serv

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGus

Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCre

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permiss

Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global ob

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run atta

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename

Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-contro

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resu

Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have

If temporary "one-time" permissions, such as the ability to use the Camera, were granted to a document loaded using a fi

Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume