2023

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller

An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller

Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().

A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation C

An improper privilege management issue that could allow an attacker to cause a denial of service over the OTA mechanism

Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service

HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attribu

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authe

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAES

Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyPare

podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad.

Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers t

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UA

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML docu

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for

Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-

An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-

An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_functio

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedar

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerr

Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_ident

An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to in

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute

The n8n package 0.218.0 for Node.js allows Information Disclosure.

The n8n package 0.218.0 for Node.js allows Escalation of Privileges.

The n8n package 0.218.0 for Node.js allows Directory Traversal.

Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable informa

Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux

Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially

Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 bef

Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow

Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to

Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may a

Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of

Boxo, formerly known as go-libipfs, is a library for building IPFS applications and implementations. In versions 0.4.0 a

Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user

Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authentica

Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to

Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable

Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 m

Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 ma