2023

IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to stored cross-site scripting. This vulne

WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fa

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files o

WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault.

sbt is a build tool for Scala, Java, and others. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of

Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack could potentially exploi

Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an authenticated, local atta

The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard `postMessa

Frappe is a full-stack web application framework that uses Python and MariaDB on the server side and an integrated clien

Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially

Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability. A low-privileged authenticated attacker can expl

An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service

An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation. This issue

An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing

An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on

Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk.

Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injectio

Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process.

Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. Th

Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local

The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed exec

The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerabili

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uni

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074,

When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were

An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection

Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.5

CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML externa

A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue

A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerabilit

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affec

A vulnerability, which was classified as problematic, has been found in CodeAstro Internet Banking System 1.0. This issu

A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects

A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unkno

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial char

iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell meta

WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information by bypassi

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this i

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by thi

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is a

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some u

Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.

The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-

Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole Smooth Scroll Links [SSL] plugin <= 1.1.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Lee Le @ Userback Userback plugin <= 1.0.13 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.

The web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8 before 4.8.0.101 execu

views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with s