2023

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (W

Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Clo

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (W

Sensitive information disclosure due to excessive collection of system information. The following products are affected:

Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Gr

Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support

Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `De

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV.

Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV.

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acron

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: A

Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file downl

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Gr

Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software o

An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Con

A Cross-Site Request Forgery (CSRF) vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configur

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Win

An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerat

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in the Schweitzer

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SE

An Improper Handling of Unicode Encoding vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator

An Inclusion of Functionality from Untrusted Control Sphere vulnerability in the Schweitzer Engineering Laboratories SE

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering L

Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agen

Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acro

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: A

Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealG

An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows

An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attack

An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers

A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to

A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 al

IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information th

IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information th

An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privileg

IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be re

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SR

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synolog

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Do

A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vspher

The Order Tracking Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the order status parameter

The Order Tracking Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the start_date and end_d

The Woo Custom Emails for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wcemails_edit' parameter in

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to unauthorized access of data due to a missing capabili

The WooCommerce PDF Invoice Builder for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce che

The WooCommerce PDF Invoice Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings