2023

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that w

Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. Some of these bugs showed evidence of memory corruptio

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrom

After downloading a Windows <code>.scf</code> script from the local filesystem, an attacker could supply a remote path t

Module load requests that failed were not being checked as to whether or not they were cancelled causing a use-after-fre

An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in t

After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path

When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded was not co

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially

Permission prompts for opening external schemes were only shown for <code>ContentPrincipals</code> resulting in extensio

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs s

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12

ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models. A vulnerability in versions 202

Unrestricted Upload of File with Dangerous Type vulnerability in Mobatime web application (Documentary proof upload modu

Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacke

Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated

ASUS RT-AC86U’s specific cgi function has a stack-based buffer overflow vulnerability due to insufficient validation for

ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user

Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An a

Hitron CODA-5310 has hard-coded encryption/decryption keys in the program code. A remote attacker authenticated as an ad

Hitron CODA-5310 has insufficient filtering for specific parameters in the connection test function. A remote attacker a

SGUDA U-Lock central lock control service’s user management function has incorrect authorization. A remote attacker with

SGUDA U-Lock central lock control service’s lock management function has incorrect authorization. A remote attacker with

Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/

The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and i

The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in th

An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform A

An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalat

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permissi

An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req

An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req

Vite provides frontend tooling. Prior to versions 2.9.16, 3.2.7, 4.0.5, 4.1.5, 4.2.3, and 4.3.9, Vite Server Options (`s

OpenProject is web-based project management software. For any OpenProject installation, a `robots.txt` file is generated

In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web

In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process

In Splunk Enterprise versions below 9.1.0.2, 9.0.5.1, and 8.2.11.2, an attacker can inject American National Standards I

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a

In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100,

On Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, an unauthenticated attacker can send specially-crafted me

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability w

DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and del

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local auth

Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execut

Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to

A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher al

Insufficient authentication in the MQTT backend (broker) allows an attacker to access and even manipulate the telemetry

Controller 6000 is vulnerable to a buffer overflow via the Controller diagnostic web interface upload feature. Thi