2023

JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey

An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow an

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vuln

A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unkn

A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. Th

A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unkn

SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operati

IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission spe

PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application

`nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options direct

`nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed

HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated C

Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collab

dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments ru

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This i

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue

In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/platform/pixel/pixel_gpu_slc.c

In multiple locations, there is a possible null dereference due to a missing null check. This could lead to remote denia

In cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to r

In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there

there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local

In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to

In sms_DecodeCodedTpMsg of sms_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. This co

In ppcfw_enable of ppcfw.c, there is a possible EoP due to a missing permission check. This could lead to local escalati

In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds rea

An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x.

The Candid library causes a Denial of Service while parsing a specially crafted payload with 'empty' data type. For exa

File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by c

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker

All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing che

An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTT

An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of

An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware version

A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior

Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Tec

A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part

A vulnerability, which was classified as critical, has been found in osCommerce 4. Affected by this issue is some unknow

A vulnerability classified as critical has been found in Software AG WebMethods 10.11.x/10.15.x. Affected is an unknown

Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls

Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at sl

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merg

Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_predic

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bit

libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag at /libheif/exif.cc.

libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.