2023

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vu

A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of th

A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of

A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability af

A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affec

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experi

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability h

An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnera

Nanopb before 0.3.1 allows size_t overflows in pb_dec_bytes and pb_dec_string.

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file upl

Microsoft Publisher Remote Code Execution Vulnerability

Microsoft Publisher Remote Code Execution Vulnerability

OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2

An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can le

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an ou

A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to injec

The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information

HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6

A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the

A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004,

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attac

A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A loca

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c i

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings,

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) remo

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) remo

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault

TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface.

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interfac

jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers

rudder-server is part of RudderStack, an open source Customer Data Platform (CDP). Versions of rudder-server prior to 1.

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to sen

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to

CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).

xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread_sheetlist_close() f

The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter.

In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password.

The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TY

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter.

Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may

A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code executi