2023

An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a l

An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Junip

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of

An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decod

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS

An Incorrect Default Permissions vulnerability in Juniper Networks Junos OS Evolved allows a low-privileged local attack

An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS al

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Net

An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allo

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS al

An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos

An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a loc

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS

Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server.

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

Electra Central AC unit – The unit opens an AP with an easily calculated password.

Electra Central AC unit – Hardcoded Credentials in unspecified code used by the unit.

Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS

There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11

Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() rea

gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing lib

A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodes

A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autode

An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through mali

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerabili

A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerabilit

A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which ma

Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, se

A vulnerability classified as critical has been found in SourceCodester Purchase Order Management System 1.0. Affected i

hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerabi

A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this

An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods

A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import data

D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.

APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.

Mattermost fails to redact from audit logs the user password during user creation and the user password hash in other op

go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faturamatik Bircar

SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges

DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.

The Slider, Gallery, and Carousel by MetaSlider WordPress plugin 3.29.0 does not sanitise and escape a parameter before

- The Photo Gallery by 10Web WordPress plugin before 1.8.15 did not ensure that uploaded files are kept inside its uploa

The WP VR WordPress plugin before 8.2.9 does not sanitise and escape some parameters before outputting them back in the

The W4 Post List WordPress plugin before 2.4.6 does not escape some URLs before outputting them in attributes, leading t

The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before disp

The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attac

The Easy Forms for Mailchimp WordPress plugin before 6.8.7 does not validate and escape some of its shortcode attributes