2023

Cross-Site Request Forgery (CSRF) vulnerability in Monchito.Net WP Emoji One plugin <= 0.6.0 versions.

Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windo

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versio

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are

Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

Memory corruption while invoking callback function of AFE from ADSP.

Memory corruption while parsing the ADSP response command.

Memory corruption in DSP Service during a remote call from HLOS to DSP.

Memory corruption in WLAN Firmware while doing a memory copy of pmk cache.

Transient DOS in WLAN Firmware while parsing rsn ies.

Transient DOS in WLAN Firmware while parsing a NAN management frame.

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

Memory corruption in Modem while processing security related configuration before AS Security Exchange.

Memory Corruption in HLOS while registering for key provisioning notify.

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.

Information Disclosure in data Modem while parsing an FMTP line in an SDP message.

Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.

Transient DOS in Modem while allocating DSM items.

Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.

Transient DOS in Modem while triggering a camping on an 5G cell.

Memory Corruption in Data Modem while making a MO call or MT VOLTE call.

Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

Weak configuration in Automotive while VM is processing a listener request from TEE.

Improper Access to the VM resource manager can lead to Memory Corruption.

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passe

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a

Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to acce

A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege

The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sp_responsi

Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows

Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.Th

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local

Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier

Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and

Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user vi

Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to i

OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to e

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access

A flaw exists in FlashArray Purity wherein under limited circumstances, an array administrator can alter the retention l

A flaw exists in FlashArray Purity whereby an array administrator by configuring an external key manager can affect the

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component di

A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is confi

A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can i

A flaw exists in FlashBlade Purity (OE) Version 4.1.0 whereby a user with privileges to extend an object’s retention per

Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the he