2023

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena

Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escal

Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94,

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escala

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticate

Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user

Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthentic

Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated use

Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to pot

Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentiall

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user

Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to poten

Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred whi

When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred whi

If certain App Transport Security (ATS) settings are set in a certain manner, insecure loading of web content can be ach

A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-f

An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate pro

HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, 2

Zoho ManageEngine Applications Manager through 16530 allows reflected XSS while logged in.

MISP 2.4.174 allows XSS in app/View/Events/index.ctp.

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to versio

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.

iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.

A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could

An unauthenticated attacker could achieve the code execution through a RemoteControl server.

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could

A previously generated artifact by an administrator could be accessed by an attacker. The contents of this artifact coul

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disrup

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Swi

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Mon

Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236

An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource

If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumve

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, an arbitrary file wr

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, authenticated attack

1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prio

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget

There is a Cross Site Scripting (XSS) vulnerability in the value-text-o_sms_email_request_message parameters of index.ph

PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Requests