2023

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traff

When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note:

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensit

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assi

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration ut

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow a

Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known val

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Prot

Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods – Custom Content Types and Fields plugin <= 

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who

In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to es

Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire p

A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated atta

An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows

European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Si

Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authentica

The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code v

A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to ex

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containi

** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option s

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user

The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowin

The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-p

The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowin

Transient DOS due to reachable assertion in Modem when UE received Downlink Data Indication message from the network.

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation.

Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.

Memory corruption in Graphics while importing a file.

Memory corruption in HAB Memory management due to broad system privileges via physical address.

Transient DOS due to reachable assertion in Modem while processing config related to cross carrier scheduling, which is

Information disclosure due to buffer over-read in Modem while parsing DNS hostname.

Transient DOS due to reachable assertion in Modem during OSI decode scheduling.

Transient DOS due to NULL pointer dereference in Modem while sending invalid messages in DCCH.

Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.

Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.

Memory corruption in Automotive due to Improper Restriction of Operations within the Bounds of a Memory Buffer while exp

3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 fil

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certa

Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated maliciou

A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remot

A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al

The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allo

A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API ca

A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.

Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload

D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.

D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device