2023

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems

An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android

A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege es

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to

An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Exec

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to downlo

Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.

Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a rem

com.perimeter81.osx.HelperTool in Perimeter81 10.0.0.19 on macOS allows Local Privilege Escalation (to root) via shell m

A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a craft

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configu

A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that

Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user

Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions

Gradle is a build tool with a focus on build automation and support for multi-language development. When Gradle writes a

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, be

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted P

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by exec

Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message i

Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task

pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the

In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.

MISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain sensitive informati

An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Pa

An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS via

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to bl

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge t

An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity

An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorr

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to sc

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compac

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of

angular-ui-notification v0.1.0, v0.2.0, and v0.3.6 was discovered to contain a cross-site scripting (XSS) vulnerability.

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI

Joplin before 2.11.5 allows XSS via an AREA element of an image map.

Joplin before 2.11.5 allows XSS via a USE element in an SVG document.

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status