2023

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can

Auth. SQL Injection') vulnerability in Kunal Nagar Custom 404 Pro plugin <= 3.7.0 versions.

A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a craf

Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from appl

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/e

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 all

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that t

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-clu

An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verif

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function i

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

Azure Machine Learning Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Visual Studio Spoofing Vulnerability

Windows Kernel Denial of Service Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Information Disclosure Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Lock Screen Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability

Visual Studio Information Disclosure Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Lock Screen Security Feature Bypass Vulnerability

Windows Spoofing Vulnerability

Windows Enroll Engine Security Feature Bypass Vulnerability

Windows Domain Name Service Remote Code Execution Vulnerability

praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary ma

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be

mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be a

OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's

Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notific

Aten PE8108 2.4.232 is vulnerable to denial of service (DOS).

Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability