2023

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC17

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC17

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Auth

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. Auth

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati

This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prio

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation C

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-W

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticati

Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling proc

An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary co

Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.

An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to

A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in login.tmpl.php in ATutor 2.2.1 allows r

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If a

The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing

Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious C

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html.

Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion.

A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minim

Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Att

Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Wi

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel r

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel r

A vulnerability exists in the SDM600 API web services authorization validation implementation. An attacker who successf

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo

Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with li

A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mehjabin Orthi Interactive SVG Image Map Builder plugi

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (F

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP Darko Responsive Pricing Table plugin <= 5.1.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in biplob018 Image Hover Effects for Elementor with Lightbox

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in iThemes WPComplete plugin <= 2.9.2 versions.

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting D

amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.

OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is tri

discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb`

LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion. NOTE: third parties dispute this because the

The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of t

The pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of this vulnerability may

The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vu

Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuratio

Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.