2023

An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affe

The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null

The SlideOnline WordPress plugin through 1.2.1 does not validate and escape some of its shortcode attributes before outp

The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate

A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code exec

Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team repo

Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attac

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately priv

A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113.

Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.

A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potent

In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerabi

In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master passwo

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC

libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on W

KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on W

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 fi

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially craf

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM f

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially craf

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially craf

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a spec

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially craf

Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attack

The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modificatio

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA

In Siren Investigate before 13.2.2, session keys remain active even after logging out.

A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to exe

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's mac

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. Th

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, tha

A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessin

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of a

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performin

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory trav

_joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVol

A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing c

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/u

An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethe

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/p

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media

A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. T

A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Af