2023

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environmen

An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the mi

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service.

DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote at

Dell command configuration, version 4.8 and prior, contains improper folder permission when installed not to default pa

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password Vulnerability. An attacker, w

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabil

Prior Dell BIOS versions contain an improper input validation vulnerability. A local authenticated malicious user may p

Dell EMC Metro node, Version(s) prior to 7.1, contain a Code Injection Vulnerability. An authenticated nonprivileged at

Dell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious user may potentially ex

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exp

Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-s

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-s

Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (compo

Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server. Supported versions that are aff

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: XML Security component)

Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation). Suppor

Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Auomated Test Suite).

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Repor

Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(Pocke

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components). Supported ve

Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Synchronization). Suppo

Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Setup). Supported versio

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support

Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: E-Business Collections

Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported vers

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin C

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon

Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon

An unauthorized user could alter or write files with full control over the path and content of the file.

An unauthorized user could possibly delete any file on the system.

An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.

An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and

Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortab

mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerab

IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to t

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to

A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attack

An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vuln

The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a