2023

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows unti

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 cha

A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated,

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malfo

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can

PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postPro

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at

Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPI

Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO pac

Microsoft Exchange Server Remote Code Execution Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Power Apps Spoofing Vulnerability

NuGet Client Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET Framework Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted

An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/bac

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=s

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mod

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=s

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=s

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=s

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=u

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=s

File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.

An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impac

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via c

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via c