2023

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corru

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corru

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exp

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr

Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install

Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially expl

Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will pr

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and p

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and p

At the most basic level, an invalid pointer can be input that crashes the device, but with more knowledge of the device’

Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API

Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially cra

Avaya IX Workforce Engagement v15.2.7.1195 - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Avaya IX Workforce Engagement v15.2.7.1195 - CWE-522: Insufficiently Protected Credentials

Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy

ROZCOM server framework - Misconfiguration may allow information disclosure via an unspecified request.

ROZCOM client CWE-798: Use of Hard-coded Credentials

An issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of service via the database

An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by

The Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its SharedPreference files. These

SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPr

SoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify the SharedPreference fil

A user can supply malicious HTML and JavaScript code that will be executed in the client browser

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive i

An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent stri

An issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of service via arbitary da

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Cross Site Request Forgery (CS

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Contr

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 suffers from Multiple Stored Cross-Site Scripti

Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server

MeterSphere is an open source continuous testing platform. Version 2.9.1 and prior are vulnerable to denial of service.

CKAN is an open-source data management system for powering data hubs and data portals. Prior to versions 2.9.9 and 2.10.

A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process

A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker cou

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior t

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual mac

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP reques

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process

An issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to cause a denial of service

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process

An issue was discovered in Joomla! 4.2.0 through 4.3.1. The lack of rate limiting allowed brute force attacks against MF

An issue was discovered in Joomla! 4.2.0 through 4.3.1. Lack of input validation caused an open redirect and XSS issue w

Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This i