2023

Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerab

An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive informat

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions

A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by th

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected

A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of th

A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown func

A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vu

A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affe

A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability a

LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occ

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown

spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view.

Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engine

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (S

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (S

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer

An Authentication Bypass Using an Alternate Path or Channel vulnerability in the Schweitzer Engineering Laboratories Rea

An Improper Certificate Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Contr

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation C

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authe

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyPare

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-

The n8n package 0.218.0 for Node.js allows Directory Traversal.

Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable informa

Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially

Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 bef

Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to

Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may a

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of

Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authentica

Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to