2023

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kathy Darling Simple User Listing plugin <= 1.9.2 versions

An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vu

Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service co

Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerabilit

The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of

Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC ava

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vuln

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p

Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC ava

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p

Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause p

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service inc

Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confi

Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may aff

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9

An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9

Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK

Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerabilit

Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch preve

Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect avail

Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perf

In the module "Order Duplicator " Clone and Delete Existing Order" (orderduplicate) in version <= 1.1.7 from Silbersaite

Insecure permissions in Smart Soft advancedexport before v4.4.7 allow unauthenticated attackers to arbitrarily download

Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 an

An Information Disclosure vulnerability exists in Opay Mobile application 1.5.1.26 and maybe be higher in the logcat app

A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directo

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Group-Office is an enterprise CRM and groupware tool. In affected versions there is full Server-Side Request Forgery (SS

Improper Neutralization of Formula Elements in a CSV File vulnerability in Kaushik Kalathiya Export Users Data CSV.This

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat

A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.

A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared

Improper Neutralization of Formula Elements in a CSV File vulnerability in WPOmnia KB Support.This issue affects KB Supp

RemoteClinic 2.0 contains a critical vulnerability chain that can be exploited by a remote attacker with low-privileged

The WD WidgetTwitter plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, a

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPSolutions-HQ WPDBSpringClean plugin <= 1.6 versions.

EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an

A buffer overflow in the HTTP server component of Tenda RX9 Pro v22.03.02.20 might allow an authenticated attacker to ov

Missing error handling in the HTTP server component of Tenda RX9 Pro Firmware V22.03.02.20 allows authenticated attacker

An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause

An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause ou

Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary cod

Memory corruption in Audio when SSR event is triggered after music playback is stopped.

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

Memory corruption in Audio while processing the VOC packet data from ADSP.

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.