2023

Windows Graphics Component Elevation of Privilege Vulnerability

Windows SMB Denial of Service Vulnerability

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remot

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub

An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an e

An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS functi

Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execu

Insecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker to escalate privileges

DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.3

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.

Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.

Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.

libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_ut

MaraDNS is open-source software that implements the Domain Name System (DNS). In version 3.5.0024 and prior, a remotely

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versio

A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affe

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connec

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor Wit

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Amin A.Rezapour Product Specifications for Woocommerce plu

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in JC Development Team WooCommerce JazzCash Gateway Plugin pl

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the compon

A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore com

SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a vi

In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy mach

In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can at

Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757,

In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with

In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no

.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with

An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in chilidevs Return and Warranty Management System for WooCom

EasyTor Applications – Authorization Bypass - EasyTor Applications may allow authorization bypass via unspecified meth

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified

Ghost is an app for new-media creators with tools to build a website, publish content, send newsletters, and offer paid

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message han