2023

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN

Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A

A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-craf

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs,

Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere

Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability

Vulnerability of apps' permission to access a certain API being incompletely verified in the wireless projection module.

Vulnerability of signature verification in the iaware system being initialized later than the time when the system broad

Race condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful expl

All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to

Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows atta

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data

Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account informa

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attack

Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 a

Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade

Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacke

Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023 Release 1 allows local atta

Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023 Release 1 allows local attacker

Improper access control in Audio system service prior to SMR Jul-2023 Release 1 allows attacker to send broadcast with s

Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to SMR Jul-2023 Release 1 allows lo

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local a

Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to SMR Jul-2023 Release 1 allow

Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior to SMR Jul-2023 Release 1 a

Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior to SMR Jul-2023 Release 1

Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior to SMR Jul-2023 Relea

Improper input validation vulnerability in Transaction prior to SMR Jul-2023 Release 1 allows local attackers to launch

Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023 Release 1 allows local attack

Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local att

Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local

Out of bounds read and write in callgetTspsysfs of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local att

Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attac

Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attack

Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restri

Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to

Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.

An improper authorization vulnerability in Darktrace mobile app (Android) prior to version 6.0.15 allows disabled and lo

A cross-site scripting (XSS) vulnerability in User Registration & Login and User Management System with Admin Panel v3 a

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository it-novum/openitcockpit prior to 4.6.6.

Statamic is a flat-first, Laravel and Git powered content management system. Prior to version 4.10.0, the SVG tag does n

Uptime Kuma, a self-hosted monitoring tool, has a path traversal vulnerability in versions prior to 1.22.1. Uptime Kuma

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticat

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticat

Pandoc is a Haskell library for converting from one markup format to another, and a command-line tool that uses this lib

A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of s

taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to vers