2023

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGu

Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via

File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbi

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC p

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft

Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize exte

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user ca

TouchLink packets processed after timeout or out of range due to Operation on a Resource after Expiration and Missing Re

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauth

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec

Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a cr

Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received fr

Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create publ

Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head in

A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could ha

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incomi

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary c

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may

Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the cont

A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image fil

A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local atta

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of

Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to co

A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasa

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the trans

RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection

urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or pro

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, rem

A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastr

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected de

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code

The 'sReferencia', 'sDescripcion', 'txtCodigo' and 'txtDescripcion' parameters, in the frmGestionStock.aspx and frmEditS

TCMAN GIM v8.0.1 is vulnerable to a SQL injection via the 'SqlWhere' parameter inside the function 'BuscarESM'. The expl

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created accou

Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to denial of service due to W

A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, th

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the priv

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Dynamic Pricing and Discount Rules for WooCommerce plugin

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture c

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable th

A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by thi

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. T

Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Enhanced Ecommerce Google Analytics for WooCommerce plugi

IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations cou