2023

Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attack

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring an

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged

Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tina

opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io

A NULL pointer can be dereferenced when signatures are being verified on PKCS7 signed or signedAndEnveloped data. In cas

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresse

An invalid pointer dereference on read can be triggered when an application tries to check a malformed DSA public key by

An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any h

Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to ac

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to creat

IBM Cloud Pak for Multicloud Management Monitoring 2.0 and 2.3 allows users without admin roles access to admin function

B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which

Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server

 Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages

Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate acc

Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition

Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to eng

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user t

Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to

Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corr

Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of boun

Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corru

In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.

Command Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware BR428nS v3 allows attacker

An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive in

A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Conne

TYPO3 is a free and open source Content Management Framework released under the GNU General Public License. In affected

A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to comp

A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition w

TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Agen

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Et

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Swi

Insecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload arbitrary files and exe

An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to vi

A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SUSE Ranch

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to conti

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler o

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod a

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locall

A Incorrect Default Permissions vulnerability in rmt-server-regsharing service of SUSE Linux Enterprise Server for SAP 1

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experie

A post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG series firmware versions 4.

A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will b

An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configur

In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote informat

Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized