2023

The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenTex

IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.

A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could allo

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier coul

The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of introd

Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated ap

This vulnerability enables ssh access to minikube container using a default password.

Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newlin

Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the exe

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authent

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Weak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access to the system via a co

Weak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows attackers to gain full access t

Weak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows attackers to gain full acces

Weak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file u

SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code e

Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the comp

AList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to obtain sensitive informat

A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code an

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) v

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management Sy

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authe

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can

Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy

An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/ad

Improper Access Control in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0.

Cross-site Scripting vulnerability in Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component) al

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code wit

Wi-Fi AP UNIT AC-PD-WAPU v1.05_B04 and earlier, AC-PD-WAPUM v1.05_B04 and earlier, AC-PD-WAPU-P v1.05_B04P and earlier,

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10

Buffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F ver

Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenti

Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent at

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special character

Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attacker

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gain

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gain

An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a

The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic

A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username

The affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP comman

The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files

Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-code

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a n

Devices using Snap One OvrC cloud are sent to a web address when accessing a web management int

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.