2023

Deno is a runtime for JavaScript and TypeScript. In deno 1.34.0 and deno_runtime 0.114.0, outbound HTTP requests made us

mx-chain-go is an implementation of the MultiversX blockchain protocol written in the Go language. Metachain cannot proc

Unchecked Return Value in GitHub repository gpac/gpac prior to 2.2.2.

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

KramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via par

A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unkno

An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a us

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory st

Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticat

The Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions starting from 1.0.7

The Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability che

The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.0 via

Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest

SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attac

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulat

An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any typ

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted pr

An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in

An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate w

An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauth

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote at

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attac

An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause a denial of servi

An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause code execution and

The Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker can use to inject larg

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the

There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the

A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vs

Leantime is a lean open source project management system. Starting in version 2.3.21, an authenticated user with comment

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device.

Incorrect access control in luowice v3.5.18 allows attackers to access cloud source code information via modification fo

IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RS

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corru

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corru

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exp

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install

Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially expl

Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially cra

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request.

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These

SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference fil