2023

A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown fun

A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects som

Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).

Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacke

Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in chan

Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.

HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customer

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC produc

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege

Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege

Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which mi

Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which mi

HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being re

Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker coul

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An remote unaut

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged lo

Dell BIOS contains a Stack based buffer overflow vulnerability. A local authenticated attacker could potentially exploi

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potential

Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A loca

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS.

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of crypt

Dell Rugged Control Center, versions prior to 4.5, contain an Improper Input Validation in the Service EndPoint. A Loca

Dell BIOS contains a heap buffer overflow vulnerability. A local attacker with admin privileges could potentially explo

Versions of the package mt7688-wiscan before 0.8.3 are vulnerable to Command Injection due to improper input sanitizatio

All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other chec

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software function

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local att

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege e

A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on th

Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsi

VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the v

As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This co

OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. Th

Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.

Eta is an embedded JS templating engine that works inside Node, Deno, and the browser. XSS attack - anyone using the Exp

Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php

A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker t

Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.

Buffer overflow vulnerability in function json_parse_object in sheredom json.h before commit 0825301a07cbf51653882bf2b15

BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale a

COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerab

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via se

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbe

In Apache Linkis <=1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unau

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbu