2023

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink at

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 charac

In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" (facebookconversiontrackingplus) up to ver

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kerne

An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted

An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted m

An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access toke

An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted

An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted mess

An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted mes

An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted me

NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to

NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an at

Franklin Fueling System TS-550 versions prior to 1.9.23.8960 are vulnerable to attackers decoding admin credentials, re

FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vul

Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting thi

Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vuln

Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed uncheck

The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access contr

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is

A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift

An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.

Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 throu

A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentia

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user t

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap c

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow

A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command inje

A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower

A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defens

A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Def

A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug i

A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2

A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, rem

A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe

A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerabi

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerab