2023

Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal v

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerabilit

A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, s

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in t

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerabi

** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.

Zoho ManageEngine ADManager Plus before 7183 allows admin users to exploit an XXE issue to view files.

Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applic

Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password

All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all req

A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulner

A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the f

A vulnerability was found in SmartWeb Infotech Job Board 1.0 and classified as critical. Affected by this issue is some

A vulnerability has been found in SourceCodester Shopping Website 1.0 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in SourceCodester Shopping Website 1.0. Affected is an unkn

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.ht

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary c

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowi

The Ninja Forms Google Sheet Connector WordPress plugin before 1.2.7, gsheetconnector-ninja-forms-pro WordPress plugin t

The Elementor Forms Google Sheet Connector WordPress plugin before 1.0.7, gsheetconnector-for-elementor-forms-pro WordPr

The WPForms Google Sheet Connector WordPress plugin before 3.4.6, gsheetconnector-wpforms-pro WordPress plugin through 3

The CF7 Google Sheets Connector WordPress plugin before 5.0.2, cf7-google-sheets-connector-pro WordPress plugin through

The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted

The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate

The ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before o

Memory Corruption in WLAN HOST while fetching TX status information.

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

Memory Corruption in Audio while allocating the ion buffer during the music playback.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

An app with non-privileged access can change global system brightness and cause undesired system behavior.

Memory corruption in Linux when the file upload API is called with parameters having large buffer.

Memory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.

Memory corruption in Linux while calling system configuration APIs.

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.

Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.

Information disclosure in DSP Services while loading dynamic module.

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of

In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati

In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati

In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privil

In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege w