2023

Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access

Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, po

A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure o

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause

NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.

Visual Studio Code Spoofing Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

Windows Driver Revocation List Security Feature Bypass Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows Bluetooth Driver Information Disclosure Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows NTLM Security Support Provider Information Disclosure Vulnerability

A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitr

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and before which may allow a remote, una

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthe

Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prio

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbit

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_ll

Craft CMS is a content management system. Starting in version 3.0.0 and prior to versions 3.8.4 and 4.4.4, a malformed t

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function i

Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the m

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiff

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via

An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal functio

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This i

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the E

DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.3

mage-ai is an open-source data pipeline tool for transforming and integrating data. Those who use Mage starting in versi

DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.3

yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Mul

Tauri is software for building applications for multi-platform deployment. The Tauri IPC is usually strictly isolated fr

yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c. Note: Multiple third p

yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple th

A vulnerability was found in SourceCodester Online Reviewer System 1.0 and classified as critical. Affected by this issu

A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by t

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connec

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connec