2023

A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. A s

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (

Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privi

Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route. This issue affects Docker

Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog. This issue affects

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbit

General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the

Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may

Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerabili

Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause feat

Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability

Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect

Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect co

An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSG

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confi

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vu

Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect in

Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerabili

The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentia

MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as criti

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affe

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xtemos WoodMart plugin <= 7.2.4 versions.

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critic

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been de

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as c

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christoph Rado Cookie Notice & Consent plugin <= 1.6.0

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Order Delivery Date for WooCommerce plugin

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as criti

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up

A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200,

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that ut

A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the con

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the

An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated

A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when

The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erforms_user_meta' shortcode

The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in

SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via