2023

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service be

cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (sla

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions start

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allow

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions start

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starti

Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servic

Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key veri

ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is an OAuth 2.0 feature that allows applications to retrie

A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functio

A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unkno

A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of

A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the fil

A vulnerability has been found in sviehb jefferson up to 0.3 and classified as critical. This vulnerability affects unkn

A vulnerability, which was classified as critical, was found in IonicaBizau node-gry up to 5.x. This affects an unknown

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijac

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to SQL injection. A remote attacker could sen

IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.1 could allow an authenticated user to exhaust server res

A vulnerability classified as problematic has been found in zerochplus. This affects the function PrintResList of the fi

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local atta

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not

A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown func

A vulnerability was found in Nayshlok Voyager. It has been declared as critical. Affected by this vulnerability is an un

Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, po

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the b

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of inte

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of i

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the T

Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP

Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory

A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting i

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential informa

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in comp

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity

Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers t

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an i

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conten