2023

The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from appl

The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. T

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/e

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Inj

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before u

An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 all

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that t

A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve lo

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-clu

An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verif

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attac

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function i

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

Azure Machine Learning Information Disclosure Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Microsoft Edge (Chromium-based) Tampering Vulnerability

Azure Service Connector Security Feature Bypass Vulnerability

Visual Studio Spoofing Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability

Visual Studio Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Information Disclosure Vulnerability

Windows Group Policy Security Feature Bypass Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Clip Service Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Memory Information Disclosure Vulnerability

Windows Lock Screen Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Netlogon RPC Elevation of Privilege Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Windows Common Log File System Driver Information Disclosure Vulnerability