2023

Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a cr

Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 8.1.8 versions.

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to

Reflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformat

The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnera

A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService o

Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes.

An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1

IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task.

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrar

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the loc

The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in

The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in

The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vuln

Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requ

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and

Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa

Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.

The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, t

Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration

A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can

Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that co

Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attack

Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability t

Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability t

Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an Improper Input Validation vulnerabi

A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.

A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rt

Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imp

Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attack

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to c

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to c

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenti

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their us

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 tha

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ o

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful e

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than i

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManage

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and l

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1

Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the r