2023

Internet Connection Sharing (ICS) Denial of Service Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability

Microsoft Outlook for Mac Spoofing Vulnerability

A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe

The NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting Bleichenbacher-like attacks. Both

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0,

The OPC UA .NET Standard Reference Server before 1.4.371.86. places sensitive information into an error message that may

The fluid_components (aka Fluid Components) extension before 3.5.0 for TYPO3 allows XSS via a component argument paramet

fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users

The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c.

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c

Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c.

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected software does not correctl

A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulne

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowin

SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` param

Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest t

Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with nul

OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and

Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playboo

Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a craf

Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint

Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to

Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability. A remote a

A Huawei data communication product has a command injection vulnerability. Successful exploitation of this vulnerability

An improper access control vulnerability exists in a Huawei datacom product. Attackers can exploit this vulnerability to

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the l

SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which c

SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_B

SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise b

The SAP HCM (SMART PAYE solution) - versions S4HCMCIE 100, SAP_HRCIE 600, SAP_HRCIE 604, SAP_HRCIE 608, does not suffici

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent reque

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3. An app

This issue was addressed through improved state management. This issue is fixed in iOS 17.2 and iPadOS 17.2. Private Bro

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS