2023

QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c.

A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load a

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 104

An issue found in CraftCMS v.3.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the Sectio

eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low

An attacker who has gained access to an admin account can perform RCE via null-byte injection Vendor: The Apache Softwa

An attacker that has gained access to certain private information can use this to act as other user. Vendor: The Apache

Allocation of Resources Without Limits or Throttling in GitHub repository froxlor/froxlor prior to 2.0.16.

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenti

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls wit

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number pa

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone para

Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the staticroute_list paramete

Altenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the co

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can ca

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing ove

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 a

Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, th

A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability

Rockwell Automation ThinManager product allows the use of medium strength ciphers.  If the client requests an insecure

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potential

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in out

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multip

File Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain escalated privileges v

A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unk

A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affe

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible

In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootst

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that was caused

A Storing Passwords in a Recoverable Format vulnerability in the Schweitzer Engineering Laboratories Real-Time Automati

Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.