2023

In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to r

In hasInputInfo of Layer.cpp, there is a possible bypass of user interaction requirements due to a tapjacking/overlay at

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver cod

A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS

A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Servi

A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleAction

A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypa

Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Bus

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco S

A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privilege

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager,

A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and

A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service

A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communicati

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web

A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Soft

In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.

AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data

A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (

A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (Do

A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS

A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service

A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information v

A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's vers

Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44

Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to de

Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported

The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40.

The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capabil

The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi

Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG26

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG26

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG26

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP,

This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to m

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of thi

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exp

pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an inf

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.

Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via

Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain