2023

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The imp

Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload craft

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the over

In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed t

VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privil

VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with netwo

An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via

Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.

Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing

Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a s

Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a spe

Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a speci

Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a speciall

Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-S

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTM

@fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enfor

Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it t

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bui

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attac

A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and

PowerJob V4.3.2 has unauthorized interface that causes remote code execution.

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of serv

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.

Broad access controls could allow site users to directly interact with the system Apache installation when providing the

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing inten

An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indica

An issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its path installs an inval

An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows

An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading t

An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFl

An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a d

An issue was discovered in ONOS 2.5.1. The purge-requested intent remains on the list, but it does not respond to change

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote att

An issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which causes an exception) remain

The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature o

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker posse

Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0.

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrol

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrol

Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during inst

A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by th

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected

Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18.

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may no

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel