2023

Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation o

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the aff

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticate

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <= 2.6.4 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Su

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol.

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management

There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point m

There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management p

Statamic is a flat-first, Laravel + Git powered CMS designed for building websites. In affected versions certain additio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Feed plugin <= 2.2.1 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Uno (miunosoft) Responsive Column Widgets plugin <

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

ASP.NET Core Denial of Service Vulnerability

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /gofo

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes

vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control th

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommer

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Manag

Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE)

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another,

Azure DevOps Server Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This i

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio

Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable

Improper Input Validation in the Networking Stack of QNX SDP version(s) 6.6, 7.0, and 7.1 could allow an attacker to pot

Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privi

Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2

Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentia

Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display poten

Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentia

Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated

Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to pote