2023

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary cod

Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap co

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentiall

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potent

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially

Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploi

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corr

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write

An isssue in GatesAIr Flexiva FM Transmitter/Exiter Fax 150W allows a remote attacker to gain privileges via the LDAP an

Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the ma

A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary

Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to us

SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibS

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulne

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized

All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be.

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to exe

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signat

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit thi

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User ac

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allow

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending un

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installati

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility

An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an

Audit logs on F5OS-A may contain undisclosed sensitive information.  Note: Software versions which have reached End of

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administrat

IBM Robotic Process Automation 21.0.0 through 21.0.7.latest is vulnerable to unauthorized access to data due to insuffic

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and bel

IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the sys

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition t

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filteri

A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whi

Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey

Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious scrip

The "OX Chat" web service did not specify a media-type when processing responses by external resources. Malicious script

Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handler

The "upsell" widget for the portal allows to specify a product description. This description taken from a user-controlla

The users clientID at "application passwords" was not sanitized or escaped before being added to DOM. Malicious script c

Frontend themes are defined by user-controllable jslob settings and could point to a malicious resource which gets proce