2023

A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows u

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file w

Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user

SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information

OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications ea

In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which

The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially un

Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.

A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due

A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted mal

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafte

An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted J

An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elem

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker t

An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extensio

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send b

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects A

A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been dec

Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanni

Prototype Pollution in GitHub repository robinbuschmann/sequelize-typescript prior to 2.1.6.

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficien

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escala

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information ex

RVTools, Version 3.9.2 and above, contain a sensitive data exposure vulnerability in the password encryption utility (R

The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comman

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue

An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endp

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Co

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P

An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve se

An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify

Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious s

Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local maliciou

Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability.

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on th

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buff

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untruste

Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2

The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outsi

Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted f