2023

Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for

A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulati

A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is a

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-

There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means

The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet

A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which

A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, w

A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allo

In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (bloc

Windows Kernel Information Disclosure Vulnerability

Windows Overlay Filter Information Disclosure Vulnerability

Event Tracing for Windows Information Disclosure Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

BitLocker Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

Windows Cryptographic Information Disclosure Vulnerability

Event Tracing for Windows Information Disclosure Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could

Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with N

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a set of us

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-cont

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application allows a basic user

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS).

A link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4.

An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2. The application is prone to reflected Cross-site Scripti

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is p

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error me

Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-

Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote a

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a rem

Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remot

Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remot

Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to b

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote at

The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type sett

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and i

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_c

The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_template

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_