2023

DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of pr

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SP

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credenti

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.

A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator (FPC) of Juniper Network

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authent

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolv

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos

An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet

An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon (iked) of Juniper Networks Junos OS on

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-bas

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and J

An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engin

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an

A cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows a

A cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal (sp) in ServiceNow Quebec

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been declared as critical. Affected

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affecte

A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute a

A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web s

A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute ar

Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability.

Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private co

A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted

A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attack

A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user coul

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conne

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default admi

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts i

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on b

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege esca

Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vector

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.

H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may all

A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is

A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management Sys

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the

A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esca

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fil

A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access contro