2023

MindsDB is an open source machine learning platform. An unsafe extraction is being performed using `shutil.unpack_archiv

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versi

A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImag

PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted inf

Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Onl

AnyMailing Joomla Plugin is vulnerable to stored cross site scripting (XSS) in templates and emails of AcyMailing, explo

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vuln

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu

A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel.

An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2

A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root

A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. This vulnerabil

A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST

A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Collne Inc. Welcart e-Commerce plugin <= 2.8.10 versions.

Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server

A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QE

NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856

When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerabil

Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS accepts SVG files up

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails

Auth. (admin+) SQL Injection (SQLi) vulnerability in ThimPress WP Pipes plugin <= 1.33 versions.

This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-8

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Read

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-19

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-19

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphi

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphi

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphi

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphi

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphi