2023

In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Thi

A LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied input before returning i

A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Lin

A use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring subcomponent in the Linux Ker

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resultin

Memory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet

GNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection or

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection

Crash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet injection or crafted capture

Dissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection

TIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via packet injection o

Excessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service via

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in

SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which

Improper Input Validation of LDAP user IDs in Tribe29 Checkmk allows attackers that can control LDAP user IDs to manipul

A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue t

An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to cr

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fro

A cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbit

The web interface of the 'Nighthawk R6220 AC1200 Smart Wi-Fi Router' is vulnerable to a CRLF Injection attack that can b

Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).

A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=.

A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute ar

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that co

GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cros

An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing pe

An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.5

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15

An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4,

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting fr

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly no

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sen

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running fir

Authenticated denial of service

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regul

All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to

In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could

The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" bu

The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written

In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. Th

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overl

In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local p

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local p

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privilege