2023

Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unkn

A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execut

In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system e

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. T

Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. T

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI

IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send sp

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

Transient DOS due to improper input validation in WLAN Host.

An open redirect to malicious sites can occur when accessing the "Feedback" action on the manager page.

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions mig

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.

Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Memory corruption due to access of uninitialized pointer in Bluetooth HOST while processing the AVRCP packet.

Memory corruption in modem due to buffer copy without checking size of input while receiving WMI command.

Information disclosure due to buffer over-read in WLAN while parsing NMF frame.

Memory corruption in User Identity Module due to integer overflow to buffer overflow when a segement is received via qmi

Memory corruption due to improper access control in Qualcomm IPC.

Memory corruption due to configuration weakness in modem wile sending command to write protected files.

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets.

Information disclosure in modem due to buffer over-red while performing checksum of packet received

Denial of service in modem due to missing null check while processing TCP or UDP packets from server

Denial of service in modem due to missing null check while processing IP packets with padding

Denial of service in modem due to null pointer dereference while processing DNS packets

Information disclosure in modem due to buffer over read in dns client due to missing length check

Information disclosure in modem due to buffer over-read while processing response from DNS server

A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function f

A command injection vulnerability in the firmware_update command, in the device's restricted telnet interface, allows an

DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, ve

DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the defaul

DataHub is an open-source metadata platform. When the DataHub frontend is configured to authenticate via SSO, it will le

DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL re

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin u

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execu

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An aut

PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated r

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior

Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior),

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A rem

Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to e

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter at