2023

Memory corruption in Audio due to use of out-of-range pointer offset while Initiating a voice call session from user spa

Memory corruption due to use after free in trusted application environment.

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification r

Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.

A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner

Improper Restriction of Rendered UI Layers or Frames in GitHub repository cockpit-hq/cockpit prior to 2.3.9-dev.

DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on

DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Servic

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin u

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious adm

Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin c

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disabl

Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attac

PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerabilit

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin use

PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenti

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privilege

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated

Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. A loc

SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An aut

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and pri

Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior)

SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) con

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally

A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to e

Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS).

Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerabili

Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulne

Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACE

A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventor

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inven

A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of In

A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function.

A vulnerability was found in webbuilders-group silverstripe-kapost-bridge 0.3.3. It has been declared as critical. Affec

Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on

There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerabili

Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user cou

Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the s

A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerabi

ChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS) vulnerability at /api/public/reg

An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importi

github.com/ipfs/go-unixfsnode is an ADL IPLD prime node that wraps go-codec-dagpb's implementation of protobuf to enable

go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. Whe

go-unixfs is an implementation of a unix-like filesystem on top of an ipld merkledag. Trying to read malformed HAMT shar

An issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files inside the root path of