2023

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x is installed w

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain w

A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/

A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can malic

The Shopping Cart & eCommerce Store WordPress plugin before 5.4.3 does not validate HTTP requests, allowing authenticate

The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capa

mod_auth_openidc is an authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This

Jenkins Phabricator Differential Plugin 2.1.5 and earlier does not configure its XML parser to prevent XML external enti

Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity (

Jenkins Visual Studio Code Metrics Plugin 1.7 and earlier does not configure its XML parser to prevent XML external enti

Jenkins Crap4J Plugin 0.9 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

A cross-site request forgery (CSRF) vulnerability in Jenkins Convert To Pipeline Plugin 1.0 and earlier allows attackers

A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allow

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds check

IBM Aspera Cargo 4.2.5 and IBM Aspera Connect 4.2.5 are vulnerable to a buffer overflow, caused by improper bounds check

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM hand

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler pot

Uncontrolled resource consumption in the logging feature in Devolutions Gateway 2023.1.1 and earlier allows an attacker

A vulnerability, which was classified as critical, has been found in sjqzhang go-fastdfs up to 1.4.3. Affected by this i

An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code exe

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can l

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write ca

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory pe

NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of

NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buf

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a backup file containing a modified "users

Generex UPS CS141 below 2.06 version, allows an attacker toupload a firmware file containing an incorrect configuration,

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the

X-Man 1.0 has a SQL injection vulnerability, which can cause data leakage.

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line

forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}.

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favic

An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted n

The VTEX [email protected] GraphQL API module does not properly restrict unauthorized access to private configuration dat

hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_con

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before

Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it usi

Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could us

A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client ex

A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the devic

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly re

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an atta

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0.

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privil

A vulnerability classified as critical has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affecte