2023

GLPI is a free asset and IT management software package. Starting in version 9.4.0 and prior to version 10.0.8, a malici

GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.

PAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a malicious shared library and us

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the e

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a craft

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful

AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-b

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching th

GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8

Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbi

icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, t

A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts

A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() f

An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A sp

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management in

A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (X

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line 

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line 

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may all

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confus

Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefo

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, s

** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.

Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applic

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some

A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in SourceCodester Shopping Website 1.0. Affected is an unkn

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.ht

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL

The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin t

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPr

The WPForms Google Sheet Connector WordPress plugin before 3.4.6, gsheetconnector-wpforms-pro WordPress plugin through 3

The CF7 Google Sheets Connector WordPress plugin before 5.0.2, cf7-google-sheets-connector-pro WordPress plugin through

The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before o

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

Memory corruption in Linux while calling system configuration APIs.

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.