2023

GLPI is a free asset and IT management software package. Versions of the software starting with 9.2.0 and prior to 10.0.

PAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a malicious shared library and us

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the e

PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a craft

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful

AMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper neutralization of CRLF sequences in

AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-b

AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based mess

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check

In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching th

GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8

Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbi

icingaweb2-module-jira provides integration with Atlassian Jira. Starting in version 1.3.0 and prior to version 1.3.2, t

A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts

A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() f

gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.

An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A sp

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A speciall

Open Redirect in GitHub repository go-gitea/gitea prior to 1.19.4.

There is an unauthenticated buffer overflow vulnerability in the process controlling the ArubaOS web-based management in

A vulnerability in ArubaOS could allow an unauthenticated remote attacker to conduct a reflected cross-site scripting (X

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line 

Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line 

An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of t

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful

A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct

"protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than

Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability an

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was

A CWE-552 "Files or Directories Accessible to External Parties” in the web interface of the Tyan S5552 BMC version 3.00

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affec

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vu

Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vu

When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage by using

TN-5900 Series version 3.3 and prior versions is vulnearble to user enumeration vulnerability. The vulnerability may all

Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidenc

A website could prevent a user from exiting full-screen mode via alert and prompt calls. This could lead to user confus

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and

Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a

The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. This vulnerability affects Firefo

A website could have obscured the fullscreen notification by using an option element by introducing lag via an expensive

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to