2023

Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS.

A vulnerability has been found in Boom CMS 8.0.7 and classified as problematic. Affected by this vulnerability is the fu

Open Access Management (OpenAM) is an access management solution that includes Authentication, SSO, Authorization, Feder

A vulnerability, which was classified as problematic, was found in PaulPrinting CMS 2018. Affected is an unknown functio

A vulnerability, which was classified as problematic, has been found in ActiveITzone Active Super Shop CMS 2.5. This iss

Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deseria

A vulnerability classified as problematic was found in Codecanyon Tiva Events Calender 1.4. This vulnerability affects u

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side a

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. Wh

Dell Hybrid Client version 2.0 contains a Sensitive Data Exposure vulnerability. An unauthenticated malicious user on t

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) compo

A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of

Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthe

Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A maliciou

Dell Wyse ThinOS versions prior to 2303 (9.4.1141) contain a sensitive information disclosure vulnerability. An unauthe

Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious

Wyse Management Suite versions prior to 4.0 contain a denial-of-service vulnerability. An authenticated malicious user

A vulnerability was found in PaulPrinting CMS 2018. It has been rated as problematic. Affected by this issue is some unk

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its

A vulnerability was found in Dooblou WiFi File Explorer 1.13.3. It has been declared as problematic. Affected by this vu

A vulnerability was found in Webile 1.0.1. It has been classified as problematic. Affected is an unknown function of the

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerabilit

The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remot

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in I

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_im

There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up op

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such f

Out-of-bounds write when handling split HTTP headers; When handling split HTTP headers, GRUB2 HTTP code accidentally mov

Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_n

HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plug

HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpecte

HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates u

Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing cred

​In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containin

Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token on

Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or d

Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can p

The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerabili

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remo

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socke

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled w

A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when

Privilege Escalation to root administrator (nsroot)