2023

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this is

A vulnerability classified as critical was found in Bug Finder ChainCity Real Estate Investment Platform 1.0. Affected b

A vulnerability was found in Weaver e-cology. It has been rated as critical. This issue affects some unknown processing

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying

A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown p

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, with

An arbitrary file upload vulnerability in the component /workplace#!explorer of Alkacon OpenCMS v15.0 allows attackers t

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit

Diafan CMS v6.0 was discovered to contain a reflected cross-site scripting via the cat_id parameter at /shop/?module=sho

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. Affected by this issue is the function actionExpo

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private"

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omn

IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.

Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS.

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side a

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. Wh

Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on t

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of

Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthe

Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A maliciou

Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthe

Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious

Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_im

There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up op

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such f

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plug

HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates u

Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can p

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled w

An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted H

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability al

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability al

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sour

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use

A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. T

A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is a

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By proce

A vulnerability, which was classified as critical, was found in Intergard SGS 8.7.0. Affected is an unknown function. Th

IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authent

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS