2023

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affe

An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r

Deserialization of Untrusted Data vulnerability in Themesflat Themesflat Addons For Elementor.This issue affects Themesf

Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements,

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerabi

Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions list

An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. T

When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could acces

A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the se

A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege es

A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to a

Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that w

Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users

Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler.

Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displaye

A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow unt

In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subs

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking del

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect Ty

`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to wr

Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence

The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that la

A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. Thi

The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vu

The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to esca

A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox E

Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerabili

When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary.

The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM

Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially all

When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If

Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects th

A vulnerability has been found in SourceCodester Online Student Management System 1.0 and classified as problematic. Aff

A where_in JINJA macro allows users to specify a quote, which combined with a carefully crafted statement would allow fo

An authenticated Gamma user has the ability to create a dashboard and add charts to it, this user would automatically be

Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive in

Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import data

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smp7, wp.Insider S

The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortc

The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'ihrss-

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 is vulnerable to HTML inje

A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the fi

A vulnerability was found in Corveda PHPSandbox 1.3.4 and classified as critical. Affected by this issue is some unknown