2023

Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network

Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers.

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A

Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbit

Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2.

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attack

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injectio

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper vali

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue

Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’

Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the

Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify d

Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an auth

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss

Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This iss

Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitiv

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In

In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in OpenJ

SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.

The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 a

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering

MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH

Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumpt

IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserializat

iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less

Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions.

Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) v

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted s

The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may aff

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may af

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may af

The window management module lacks permission verification.Successful exploitation of this vulnerability may affect conf

The Groundhogg plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.9.

Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension

Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override othe

Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/downl

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.04

Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53

Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 ***

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could ha

A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used b

There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. Th

redis v7.0.10 was discovered to contain a segmentation violation. This vulnerability allows attackers to cause a Denial

OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Doc

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acron

Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agen