2023

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo

Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. A local a

A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references

SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.

The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' param

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event parameter under the Eve

ChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID parameter at GetText.php.

WALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information.

Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 pr

Mojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection vulnerability.

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.5

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed

A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match heade

A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious us

A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cook

A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.

There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2

A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can

A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outsi

Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted mes

Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to d

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to laun

Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applic

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary c

External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in Yuga

The AMS module has a vulnerability of lacking permission verification in APIs.Successful exploitation of this vulnerabil

The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability m

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect

The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability m

The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of

The IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to

The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may af

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this v

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data in

The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerab

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user.

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV.

Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.

Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restriction

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could all