2023

An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operatin

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the

An issue was discovered in the Clario VPN client through 5.9.1.1662 for macOS. The VPN client insecurely configures the

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a loc

Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by

Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by

A CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1.

An issue was discovered in LWsystems Benno MailArchiv 2.10.1. Attackers can cause XSS via JavaScript content to a mailbo

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, l

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2)

KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables

HCL DRYiCE iAutomate is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise

A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7

/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 al

The Crash Reporter (crash_reporter.php) component of OPNsense Community Edition before 23.7 and Business Edition before

Insecure permissions exist for configd.socket in OPNsense Community Edition before 23.7 and Business Edition before 23.4

Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edit

OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 was discovered to contain insecure permissions

A cross-site scripting (XSS) vulnerability in the act parameter of system_certmanager.php in OPNsense Community Edition

A command injection vulnerability in the component diag_backup.php of OPNsense Community Edition before 23.7 and Busines

A reflected cross-site scripting (XSS) vulnerability in the component /ui/diagnostics/log/core/ of OPNsense Community Ed

A Cross-Site Request Forgery (CSRF) in the System Halt API (/system/halt) of OPNsense Community Edition before 23.7 and

An open redirect in the Login page of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows a

A directory traversal vulnerability in the Captive Portal templates of OPNsense Community Edition before 23.7 and Busine

HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise t

A SQL injection vulnerability exists in the “logging export” feature of the ScienceLogic SL1 that takes unsanitized user

A SQL injection vulnerability exists in the “message viewer iframe” feature of the ScienceLogic SL1 that takes unsanitiz

A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitize

A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitize

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐con

A SQL injection vulnerability exists in the “reporter events type” feature of the ScienceLogic SL1 that takes unsanitize

A SQL injection vulnerability exists in the “reporter events type date” feature of the ScienceLogic SL1 that takes unsan

A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized

A SQL injection vulnerability exists in the “ticket queue watchers” feature of the ScienceLogic SL1 that takes unsanitiz

A SQL injection vulnerability exists in the “ticket template watchers” feature of the ScienceLogic SL1 that takes unsani

A SQL injection vulnerability exists in the “ticket watchers email” feature of the ScienceLogic SL1 that takes unsanitiz

A SQL injection vulnerability exists in the “topology data service” feature of the ScienceLogic SL1 that takes unsanitiz

A SQL injection vulnerability exists in the vendor_country parameter of the “vendor print report” feature of the Science

A SQL injection vulnerability exists in the vendor_state parameter of the “vendor print report” feature of the ScienceLo

A SQL injection vulnerability exists in the “admin dynamic app mib errors” feature of the ScienceLogic SL1 that takes un

A SQL injection vulnerability exists in the “reporting job editor” feature of the ScienceLogic SL1 that takes unsanitize

A SQL injection vulnerability exists in the “schedule editor decoupled” feature of the ScienceLogic SL1 that takes unsan

A SQL injection vulnerability exists in the “schedule editor” feature of the ScienceLogic SL1 that takes unsanitized use

A SQL injection vulnerability exists in the “json walker” feature of the ScienceLogic SL1 that takes unsanitized user‐co

A SQL injection vulnerability exists in the “admin brand portal” feature of the ScienceLogic SL1 that takes unsanitized

A command injection vulnerability exists in the download and convert report feature of the ScienceLogic SL1 that takes u

A command injection vulnerability exists in the dashboard scheduler feature of the ScienceLogic SL1 that takes unsanitiz

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsani

A command injection vulnerability exists in the “dash export” feature of the ScienceLogic SL1 that takes unsanitized use

A command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsaniti