2023

Cachet, the open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to crea

In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. This could lead

In temp_residency_name_store of thermal_metrics.c, there is a possible out of bounds write due to a missing bounds check

In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds che

In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a

In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This

SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive i

An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to th

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially cr

A buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially cr

An OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in

A command execution vulnerability exists in the validate.so diag_ping_start functionality of Yifan YF325 v1.0_20221108.

A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A spe

An OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of peplink Surf SOHO HW1 v6.

An OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink Surf SOHO HW1 v6.3.5 (i

Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will aff

Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service

Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability m

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff

Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect servic

The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of th

Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may aff

Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerabil

Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause

Adobe Photoshop versions 23.5.5 (and earlier) and 24.7 (and earlier) are affected by an Access of Uninitialized Pointer

Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiali

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability

Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vu

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier.

Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbi

An integer overflow in xerces-c++ 3.2.3 in BigFix Platform allows remote attackers to cause out-of-bound access via HTTP

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Route

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where

In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access

An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability