2023

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privi

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve loca

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local priv

Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability h

KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can becom

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 lea

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenD

An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update t

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported

Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and maste

Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and maste

A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and mast

A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master

An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and

An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master co

A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master c

An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit

An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and mas

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions

ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wor

vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect fun

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary

Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerabili

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux

There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 11.1 and below that may allow a remote, authe

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclo

A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.

SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary comman

An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starti

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by lacking

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly

A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbit

A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbit

A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitr

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A

A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this is