2023

A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86

An issue has been discovered in GitLab DAST API scanner affecting all versions starting from 1.6.50 before 2.11.0, where

A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based sys

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the lea

The Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerabi

The facial recognition module has a vulnerability in file permission control. Successful exploitation of this vulnerabil

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of th

The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious

Some products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of ser

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulne

The Bluetooth module has a heap out-of-bounds read vulnerability. Successful exploitation of this vulnerability can caus

The Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cau

Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege esc

Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic

The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.

The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability

The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentia

The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability ma

The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability m

The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confide

The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this

The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network acc

A flaw was found in the Keycloak Node.js Adapter. This flaw allows an attacker to benefit from an Open Redirect vulnerab

Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an au

Snappier is a high performance C# implementation of the Snappy compression algorithm. This is a buffer overrun vulnerabi

GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environm

GoCD is an open source continuous delivery server. GoCD versions before 23.1.0 are vulnerable to a stored XSS vulnerabil

lambdaisland/uri is a pure Clojure/ClojureScript URI library. In versions prior to 1.14.120 `authority-regex` allows an

pymedusa is an automatic video library manager for TV Shows. In versions prior 1.0.12 an attacker with access to the web

Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A lo

Adobe Photoshop versions 23.5.3 (and earlier) and 24.1.1 (and earlier) are affected by a Use After Free vulnerability th

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Use After Free vulnerability that could result

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an Improper Input Validation vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds write vulnerability that could r

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an Improper Input Validation vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that c

Adobe Substance 3D Stager versions 2.0.0 (and earlier) are affected by an out-of-bounds read vulnerability when parsing

Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user coul

In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attac