2023

EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional pa

Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions.

Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions.

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authoriza

NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated p

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the approp

NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA i

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by ex

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead

Improper Privilege Management in GitHub repository microweber/microweber prior to 1.3.4.

@fastify/passport is a port of passport authentication library for the Fastify ecosystem. Applications using `@fastify/p

mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction

The SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a loc

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adver

io.finnet tss-lib before 2.0.0 can leak the lambda value of a private key via a timing side-channel attack because it re

There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authenticati

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthe

SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via t

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could l

Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Sp

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Sp

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The imp

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privil

Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui

A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and

Broad access controls could allow site users to directly interact with the system Apache installation when providing the

An issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its path installs an inval

An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows

An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFl

An issue was discovered in ONOS 2.5.1. The purge-requested intent remains on the list, but it does not respond to change

An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which causes an exception) remain

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrol

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during inst

Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total Security (http://www.360totals

Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/)

Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escala

Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficie

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a mali

In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local

In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the backg

In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Setti

In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This cou

In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due

In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other appl