2023

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authen

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnera

Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch pri

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.

The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user inp

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due t

Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.

The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to s

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec

Code Injection in GitHub repository lirantal/daloradius prior to master-branch.

Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-bra

In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of pr

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for adm

SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with hig

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, mess

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio

Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE

The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for e

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the inform

Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information an

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter.

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as

The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticate

The File Upload function of EasyTest has insufficient filtering for special characters and file type. A remote attacker

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and

Realtek GPON router has insufficient filtering for special characters. A remote attacker authenticated as an administrat

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this

In affected versions of Octopus Deploy it is possible for certain types of sensitive variables to inadvertently become u

Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the r

Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote atta

Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker wh