2023

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories with

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may

The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authenticatio

A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensi

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter.

Nexpose and InsightVM virtual appliances downloaded between April 5th, 2017 and May 3rd, 2017 contain identical SSH host

Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/cla

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerab

A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This i

The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.

A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javas

An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted jav

Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification

Multiple exploitable buffer overflow vulnerabilities exists in the PubNub message handler for the "control" channel of I

Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon

Authentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access conte

Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extensio

TP-Link routers, Archer C5 and WR710N-V1, using the latest software, the strcmp function used for checking credentials i

support_uri parameter in the WARP client local settings file (mdm.xml) lacked proper validation which allowed for privil

There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If 

Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This dire

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabil

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because o

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabili

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resul

Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value poten

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of servic

Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an att

Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resu

Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an a

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attack

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause

WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstN

Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an u

An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 fir

A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, whic

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability