2023

Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability

Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability m

Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause Osu

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnera

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnera

Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerab

Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnera

Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual m

Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the dev

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devi

Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob

The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in vers

The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'w

An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic

An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consis

XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio

A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability co

vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the

SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via

An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a d

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bi

Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local

Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIF

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi v

Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attac

Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitr

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sens

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code

Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sens

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code vi

An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in

An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file

An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a d

SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendma

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate

An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting para

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do

An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (Do

Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader ver

An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers t

An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to caus

Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code an