2023

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and inc

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, pr

GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6 are vulnerable to In

Discourse is an open source platform for community discussion. Versions prior to 2.8.13 (stable), 3.0.0.beta16 (beta) an

In binder_vma_close of binder.c, there is a possible use after free due to improper locking. This could lead to local es

In setUclampMinLocked of PowerSessionManager.cpp, there is a possible way to corrupt memory due to a use after free. Thi

In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility ser

In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local

In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error i

In getMainActivityLaunchIntent of LauncherAppsService.java, there is a possible way to bypass the restrictions on starti

In addOrReplacePhoneAccount of PhoneAccountRegistrar.java, there is a possible way to enable a phone account without use

In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into ena

In onActivityResult of AvatarPickerActivity.java, there is a possible way to access images belonging to other users due

In Mfc_Transceive of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. Th

In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent misma

Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certai

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'Use

A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By craf

SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges

A vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device vi

MCMS v5.2.10 and below was discovered to contain an arbitrary file write vulnerability via the component ms/template/wri

An issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running

In Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a memory leak.

In Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message can cause a NULL pointer

Incorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local privilege escalation.

IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacke

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libx

File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escal

This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-cl

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to

Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first

Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which co

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious s

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious use

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger t

Unauthenticated denial of service

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tenso

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(),

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanit

All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. T

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource

In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resou

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource

In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to t