2023

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated u

Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive info

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the s

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force a

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple at

An improper input sanitization vulnerability in the Motorola MR2600 router could allow a local user with elevated permis

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to caus

The AAWP WordPress plugin before 3.12.3 can be used to abuse trusted domains to load malware or other files through it (

The Revive Old Posts WordPress plugin before 9.0.11 unserializes user input provided via the settings, which could allow

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench

Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

AMI Megarac Password reset interception via API

A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 i

There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code exe

A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially craf

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially ex

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary

Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter

Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine co

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the fi

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by th

Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o

Grafana is an open-source platform for monitoring and observability. Starting with the 8.1 branch and prior to versions

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susc

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including,

Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. An unauthentica

The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check o

The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ

The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and

A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attacker

AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.in

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, an administrator with the permissions to

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, a layout block was able to bypass the blo