2023

An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the key_ad_new_user_avoid_time field.

The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this

Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may

Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal sto

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnera

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affec

A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this is

A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown pa

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this iss

A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown funct

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Meteri

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability a

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an un

A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is s

A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulne

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipbo

Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit se

Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to ex

Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /adm

Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allow

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the pa

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /pu

Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers t

Atropim 1.5.26 is vulnerable to Directory Traversal.

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14.

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory c

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occu

The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user,

Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0

Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan

Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installati

TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus UNAVAILABLE for "not leader

TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error) upon an attempt to get a timestamp from th

A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attac

BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows at

BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracke

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result