2023

The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customer

An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a r

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing T

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerabi

Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could

Adobe Photoshop version 22.5.1  and earlier versions   are affected by an out-of-bounds read vulnerability that could le

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerabil

Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access con

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently D

It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is c

It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused

It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.

ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attac

ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker

ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remo

ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacke

ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker wi

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent o

The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplica

The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in

WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions c

WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recordin

Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and a

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able t

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura

WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Stud

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electro

A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be ab

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electro

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Conte

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers woul

Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute ar

go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made t

SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super adm

SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.

knplabs/knp-snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. ## Issue

Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified i

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime

AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone cont

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored