2023

A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected

A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V3

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update

In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a functio

The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel ac

The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead

Memory corruption in QESL while processing payload from external ESL device to firmware.

Transient DOS in Audio while remapping channel buffer in media codec decoding.

Memory corruption while allocating memory in COmxApeDec module in Audio.

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i80

Memory Corruption in Audio while playing amrwbplus clips with modified content.

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.

Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.

Memory corruption in WLAN while running doDriverCmd for an unspecific command.

Memory corruption in RIL while trying to send apdu packet.

Information disclosure in Bluetooth when an GATT packet is received due to improper input validation.

Memory corruption due to untrusted pointer dereference in automotive during system call.

Memory corruption in Trusted Execution Environment while calling service API with invalid address.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

Information disclosure in Network Services due to buffer over-read while the device receives DNS response.

Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.

A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). Affected applications do not properly s

A vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL Hijacking vulnerability coul

In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with proje

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mAyaNet E-Commerce

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing th

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping compo

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior

In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior

ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.

log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not consi

In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain sp

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into

SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or ap

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker t

SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASI

The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64

SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an

In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs,

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain op

Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an

SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user prov

SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbit

Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumente