2023

There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may

There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause pa

A Huawei sound box product has an out-of-bounds write vulnerability. Attackers can exploit this vulnerability to cause b

Cross-site Scripting (XSS) - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e1

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nicolly WP No External Links plugin <= 1.0.2 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in psicosi448 wp2syslog plugin <= 1.0.5 versions.

Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest Themes Arya Multipurpose theme <= 1.0.5 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ko Takagi Simple Slug Translate plugin <= 2.7.2 versio

A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9

A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 a

Mattermost fails to unescape Markdown strings in a memory-efficient way, allowing an attacker to cause a Denial of Servi

Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting

Mattermost fails to validate links on external websites when constructing a preview for a linked website, allowing an at

Mattermost fails to sanitize ephemeral error messages, allowing an attacker to obtain arbitrary message contents by a sp

Mattermost fails to properly truncate the postgres error log message of a search query failure allowing an attacker to c

When creating a playbook run via the /dialog API, Mattermost fails to validate all parameters, allowing an authenticated

Mattermost fails to check if an admin user account active after an oauth2 flow is started, allowing an attacker with adm

Mattermost fails to check channel membership when accessing message threads, allowing an attacker to access arbitrary po

Mattermost fails to properly check the permissions when executing commands allowing a member with no permissions to post

Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowin

Mattermost Apps Framework fails to verify that a secret provided in the incoming webhook request allowing an attacker to

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alexander Suess asMember plugin <= 1.5.4 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 vers

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JoomSky JS Job Manager plugin <= 2.0.0 versions.

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use loc

Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vul

Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up wi

Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will

In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.

Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. Thi

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker c

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote at

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dan

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

Microsoft SQL OLE DB Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud S

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. At

SolarWinds Serv-U is submitting an HTTP request when changing or updating the attributes for File Share or File request.

D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at

Broken access control in the Registration page (/Registration.aspx) of Termenos CWX v8.5.6 allows attackers to access se

In Zimbra Collaboration Suite through 9.0 and 8.8.15, an attacker (who has initial user access to a Zimbra server instan

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 8.8.15. XSS can occur, via one of attributes of the webmai

An open redirect vulnerability exists in the /preauth Servlet in Zimbra Collaboration Suite through 9.0 and 8.8.15. To e