2023

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator

A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged rem

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A r

A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. Th

A directory traversal vulnerability in Safe Software FME Server before 2022.2.5 allows an attacker to bypass validation

A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an

Gifsicle v1.9.3 was discovered to contain a heap buffer overflow via the ambiguity_error component at /src/clp.c.

Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_ws_check_packet at /src/capture.

Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan

OpenPrinting CUPS is a standards-based, open source printing system for Linux and other Unix-like operating systems. Sta

Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticate

Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to s

The OSD Bare Metal Server uses a cryptographic algorithm that is no longer considered sufficiently secure.

Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the worksp

A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use tran

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique a

An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw aff

A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2,

Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2,

An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack.

Nextcloud Server is a data storage system for Nextcloud, a self-hosted productivity platform. When multiple requests are

Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA

Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be util

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overflo

TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflo

An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941ND

TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read ou

TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6Cfg

TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contai

Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial num

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed messag

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server,

When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS

A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this param

An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code