2023

In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size check means there is a possible integer over

In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible

In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow t

In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.

A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue wa

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the resto

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quara

Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is sus

Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary op

Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform.

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` stru

Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Mine

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login pro

Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitra

Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This

PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.

Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arb

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.

A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows at

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify othe

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authen

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensi

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteMan

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modu

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in v

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in v

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in ver

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of servi

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the rend

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to en

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that