2023

GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

NTFS Elevation of Privilege Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Azure DevOps Server Spoofing Vulnerability

Azure DevOps Server Spoofing Vulnerability

Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0

An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows atta

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected web

hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.

A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can

The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password prote

Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies

On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision co

TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/local

The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation.

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies string

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potent

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authent

TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the deviceP

ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core

Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.

Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap c

Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corr

Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially ex

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may all

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may pote

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A m

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buf

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to

Certain HP Enterprise LaserJet and HP LaserJet Managed Printers are potentially vulnerable to information disclosure whe

benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is

Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package version

GL.iNET GL-AR750S-Ext firmware v3.215 uses an insecure protocol in its communications which allows attackers to eavesdro

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3

An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log file and then