2023

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application

An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP So

SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757,

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assign

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 7

ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing

github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workfl

Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which cou

The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This

The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could al

Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to c

The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could

Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't

Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability all

CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementa

The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any u

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName para

Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parame

Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allo

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

The WH Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh

An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Ex

A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserv

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by se

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by thi

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System

An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database

A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing co

An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of

A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileU

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the

A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulner

A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quaranti

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to es

An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated

Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common R

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.