2023

Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta

In version 2.9.0.beta14 of Discourse, an open-source discussion platform, maliciously embedded urls can leak an admin's

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could all

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with ele

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a lo

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a lo

IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtai

The JetWidgets for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inc

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample

GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_m

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at

GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex funct

A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown

A vulnerability classified as critical was found in Miccighel PR-CWT. This vulnerability affects unknown code. The manip

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/fin

A vulnerability was found in stevejagodzinski DevNewsAggregator. It has been rated as critical. Affected by this issue i

A vulnerability classified as problematic was found in gturri aXMLRPC up to 1.12.0. This vulnerability affects the funct

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the func

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1

A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an

A vulnerability, which was classified as problematic, was found in bonitasoft bonita-connector-webservice up to 1.3.0. T

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component

A vulnerability was found in soerennb eXtplorer up to 2.1.12. It has been classified as critical. This affects an unknow

A vulnerability was found in soerennb eXtplorer up to 2.1.12 and classified as critical. Affected by this issue is some

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privilege

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a mul

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerabil

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnera

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.

Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3,

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.

A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privilege

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnera

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker c

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenti

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which cou

Discourse Mermaid (discourse-mermaid-theme-component) allows users of Discourse, open-source forum software, to create g

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 ar