2023

Reflected Cross-Site Scripting (XSS)

An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted H

Unauthenticated remote code execution

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability co

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability al

A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability al

There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow

There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote,

In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application.

Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spr

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A re

A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sour

A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially cra

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By

A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332.

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A s

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use

Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitr

A vulnerability was found in Intergard SGS 8.7.0. It has been declared as problematic. This vulnerability affects unknow

A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. T

A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown f

A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is a

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By proce

A vulnerability, which was classified as critical, was found in Intergard SGS 8.7.0. Affected is an unknown function. Th

A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown fun

A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected

A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affe

A vulnerability, which was classified as problematic, was found in Creativeitem Ekushey Project Manager CRM 5.0. Affecte

IBM Security Guardium 11.3 could allow a local user to escalate their privileges due to improper permission controls.

A vulnerability classified as problematic has been found in Creativeitem Mastery LMS 1.2. This affects an unknown part o

A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is

IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authent

IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without th

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an ins

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attack

Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attack

IBM Security Guardium 11.3 could allow an authenticated user to cause a denial of service due to improper input validat

IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosi

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insec

IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improp

IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack

A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is

This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in ver

This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of