2023

A user could use the “Upload Resource” functionality to upload files to any location on the disk.

An attacker with local access to the machine could record the traffic, which could allow them to resend requests witho

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could allow a pri

TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw para

xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permiss

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer

If an attacker can trick an authenticated user into loading a maliciously crafted .zip file onto Advantech WebAccess ve

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which c

Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to heap-based buffer overflow, which cou

FANUC ROBOGUIDE-HandlingPRO Versions 9 Rev.ZD and prior is vulnerable to a path traversal, which could allow an attacke

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing

SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remot

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It

SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-

CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicod

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.

Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as

Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted se

Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to lo

A privilege escalation allowing remote code execution was discovered in the orchestration service.

A vulnerability classified as critical has been found in SourceCodester Online Discussion Forum Site 1.0. This affects a

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been rated as critical. Affected by

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been declared as critical. Affected

OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an atta

zxcvbn-ts is an open source password strength estimator written in typescript. This vulnerability affects users running

mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern web UI f

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0. It has been classified as critical. Affect

A vulnerability was found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This issue affe

An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions startin

An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions star

An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 bef

An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions startin

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions star

A denial of service issue was discovered in GitLab CE/EE affecting all versions starting from 13.2.4 before 15.10.8, all

A vulnerability has been found in SourceCodester Online Discussion Forum Site 1.0 and classified as critical. This vulne

A vulnerability, which was classified as critical, was found in SourceCodester Online Discussion Forum Site 1.0. This af

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions sta

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Af

A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this

A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges