2023

Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023

An arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive files via a crafted HT

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vul

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vul

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critica

A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cf

A flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set when plugging/disconne

A flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The rds_rm_zerocopy_callback() uses li

In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as th

A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion i

A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a use

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a

A Time-of-check Time-of-use (TOCTOU) flaw was found in podman. This issue may allow a malicious user to replace a normal

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be ex

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another

Parrot Bebop 4.7.1. allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address

DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP addres

A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local accou

A malicious user could leverage this vulnerability to escalate privileges or perform unauthorized actions in the context

An authenticated malicious user could successfully upload a malicious image could lead to a denial-of-service condition.

An unauthenticated remote attacker could provide a malicious link and trick an unsuspecting user into clicking on it. If

An authenticated malicious user could acquire the simple mail transfer protocol (SMTP) Password in cleartext format, des

Nextcloud server is an open source, personal cloud implementation. In affected versions a malicious user could try to re

TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a

An unauthenticated remote attacker could force all authenticated users, such as administrative users, to perform unautho

A cross-site scripting (XSS) vulnerability in File Management Project 1.0.0 allows attackers to execute arbitrary web sc

SourceCodester Water Billing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the la

Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albu

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible

SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges vi

Denial of Service in GitHub repository gpac/gpac prior to 2.4.0.

The Modern Events Calendar Lite WordPress plugin before 6.5.2 does not sanitise and escape some of its settings, which c

N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious

The OAuth Single Sign On WordPress plugin before 6.24.2 does not have CSRF checks when discarding Identify providers (Id

The OAuth Single Sign On Free WordPress plugin before 6.24.2, OAuth Single Sign On Standard WordPress plugin before 28.4

The Coupon Zen WordPress plugin before 1.0.6 does not have CSRF check when activating plugins, which could allow attacke

The WP Plugin Manager WordPress plugin before 1.1.8 does not have CSRF check when activating plugins, which could allow

The WC Sales Notification WordPress plugin before 1.2.3 does not have CSRF check when activating plugins, which could al

The Preview Link Generator WordPress plugin before 1.0.4 does not have CSRF check when activating plugins, which could a

The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape

The Simple File List WordPress plugin before 6.0.10 does not sanitise and escape some of its settings, which could allow

The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to per

The Cookie Notice & Compliance for GDPR / CCPA WordPress plugin before 2.4.7 does not validate and escape some of its sh

The Formidable Forms WordPress plugin before 6.1 uses several potentially untrusted headers to determine the IP address

The Smart Slider 3 WordPress plugin before 3.5.1.14 does not properly validate and escape some of its shortcode attribut

The WP Image Carousel WordPress plugin through 1.0.2 does not sanitise and escape some parameters, which could allow use