2023

Adobe Dimension versions 3.4.7 (and earlier) is affected by an Improper Input Validation vulnerability that could result

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-W

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageC

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageC

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC17

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC17

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-W

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary co

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If a

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html.

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minim

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel r

A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successf

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with li

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions.

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting D

amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.

OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is tri

discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb`

The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of t

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may

The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vu

Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuratio

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based sys

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the lea

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerabil

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of th

The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious

Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of ser

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulne

Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability

The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability m

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confide

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network acc

Snappier is a high performance C# implementation of the Snappy compression algorithm. This is a buffer overrun vulnerabi

pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A lo

Adobe Photoshop versions 23.5.3 (and earlier) and 24.1.1 (and earlier) are affected by a Use After Free vulnerability th

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing