2023

A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is

​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to i

A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers

* Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnked_ve

Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list

A cross-site scripting (XSS) vulnerability in the device web interface (Log Query page) of BDCOM OLT P3310D-2AC 10.1.0F

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJ

A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving spe

An authenticated remote code execution vulnerability exists in the command line interface in ArubaOS-Switch. Successful

A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct

TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges coul

A pass-back vulnerability exists where an authenticated, remote attacker with administrator privileges could uncover st

goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with admin

OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Message

A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR

A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes

On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error ma

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxm

On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tun

Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enab

MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use

FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a craft

In OpenBGPD before 8.1, incorrect handling of BGP update data (length of path attributes) set by a potentially distant r

Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the ev

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configu

Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability whic

In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks,

Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller expos

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic sig

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks crypt

Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI),

Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interf

Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote atta

In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other

An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv softw

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in a

An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_

An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.

Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter a

A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue

An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateA