2023

A vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthen

A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow a

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an

A vulnerability in the web-based management interface of Cisco Small Business SPA500 Series IP Phones could allow an una

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation.

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.

ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /

Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/c

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) a

Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the cate

A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers t

An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to ex

A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbit

A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch

An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to exe

An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to a

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrafterCMS Engine

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device i

A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device in

A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted qu

The Wrangler command line tool  (<[email protected] or <[email protected]) was affected by a directory traversal vulnerabil

A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_h

WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability.

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and o

A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and opt

DedeCMS v5.7.109 has a File Upload vulnerability, leading to remote code execution (RCE).

The Cloudflare WARP client for Windows assigns loopback IPv4 addresses for the DNS Servers, since WARP acts as local DNS

An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntime

An issue was discovered in InsydeH2O. A malicious operating system can tamper with a runtime-writable EFI variable, lead

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP

Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticate

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only use

A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimi

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network co

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network co

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote com

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c