2023

An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial o

An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of

An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Serv

An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Ser

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.

The KIWIZ Invoices Certification & PDF System WordPress plugin through 2.1.3 does not validate the path of files to be d

The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server,

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PropertyHive plugin <= 1.5.48 versions.

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 11225

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 11225

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webcodin WCP Contact Form plugin <= 3.1.0 versions.

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated l

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation v

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component o

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component o

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component o

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component o

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component o

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component o

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in

An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products i

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple v

Denial of service in Webconf in Tribe29 Checkmk Appliance before 1.6.5.

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a work

giturlparse (aka git-url-parse) through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS (Regular

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability

A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could

A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 w

VMware Aria Operations contains a deserialization vulnerability. A malicious actor with administrative privileges can ex

VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly priv

Time Tracker is an open source time tracking system. A time-based blind injection vulnerability existed in Time Tracker

aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing e

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who con

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attac

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leadin

Improper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user t

Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentiall

WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `p