2023

In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. This coul

In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactl

Potential open redirect vulnerability in opentext Service Management Automation X (SMAX) versions 2020.05, 2020.08, 202

The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.3

The Google Maps made Simple plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions u

The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a s

Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.

Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. T

In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules

Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a sp

/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PH

Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/downl

When the isula cp command is used to copy files from a container to a host machine and the container is controlled by a

When the isula export command is used to export a container to an image and the container is controlled by an attacker,

When the isula load command is used to load malicious images, attackers can execute arbitrary code.

Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability

Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.

Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.

The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensi

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the cus

ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.

Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 version

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasu

In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code du

In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local es

In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. Th

In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could

In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could l

In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. Th

In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input

In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This

In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions du

An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) ca

A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation M

In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlie

An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to

Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CV

Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS use

Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow th

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a

An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentiall

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a r

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Acco