2023

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing

On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundan

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal syste

In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a speci

Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy setti

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks

All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key.

libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() a

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user

AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form.

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execu

lmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter at index.php.

bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pa

bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the delete_file() function.

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.

Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions.

The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of include-

Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320

Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.

Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming.

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted addr

Memory corruption due to use after free in Modem while modem initialization.

Information disclosure due to buffer overread in Linux sensors

Memory corruption due to integer overflow to buffer overflow in Modem while parsing Traffic Channel Neighbor List Update

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its

Transient DOS in Modem due to NULL pointer dereference while receiving response of lwm2m registration/update/bootstrap r

Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length.

Memory corruption occurs in Modem due to improper validation of array index when malformed APDU is sent from card.

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write p

Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet.

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playba

Transient DOS due to time-of-check time-of-use race condition in Modem while processing RRC Reconfiguration message.

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment.

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received.

Information disclosure due to buffer over-read in modem while reading configuration parameters.

Memory corruption due to double free in core while initializing the encryption key.

Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination opti

Transient DOS in Modem due to null pointer dereference while processing the incoming packet with http chunked encoding.

Information disclosure due to buffer over-read while parsing DNS response packets in Modem.

memory corruption in modem due to improper check while calculating size of serialized CoAP message

Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message

Memory corruption in modem due to improper input validation while handling the incoming CoAP message

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of

Denial of service in modem due to missing null check while processing the ipv6 packet received during ECM call