2023

Sensitive information disclosure and manipulation due to improper certification validation. The following products are a

Sensitive information disclosure and manipulation due to improper certification validation. The following products are a

TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) befor

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windo

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 version

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThimPress LearnPress Export Import plugin <= 4.0.2 version

sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists b

Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:s

The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is r

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:late

A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerability

The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive fi

Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_lis

cups-filters contains backends, filters, and other software required to get the cups printing service working on operati

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c

There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.

TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to d

SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8

Cleartext Transmission of Sensitive Information vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (

Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wal

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this

The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to th

davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).

Videostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script attempts to update Videostream

Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the

Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t

Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinc

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to instal

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corr