2023

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network.

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical netwo

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect fil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1.

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.

An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 138

OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts,

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which all

ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to a

Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnos

Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of

Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic lin

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant S

A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1

A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected app

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected app

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security c

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected app

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected app

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsis

A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as p

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions <

The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could ca

Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Se

Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue

Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wi

Improper encoding or escaping of output in Wing FTP Server (User Web Client) allows Cross-Site Scripting (XSS).This issu

Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows wi

Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by

Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sendi

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation v

SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious

All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build he

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization

SAP NetWeaver AS ABAP (applications based on Unified Rendering) - versions SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 75

SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory unde