2023

A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and be

Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profi

HCL Connections is vulnerable to reflected cross-site scripting (XSS) where an attacker may leverage these issues to exe

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated pr

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with el

A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated pri

A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated pri

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated

A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacke

A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker w

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker wi

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wit

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker wi

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local a

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may a

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may al

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privilege

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local at

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service.

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runti

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that t

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacke

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loc

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loca

jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512.

jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it i

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execut

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marke

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 version

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 ver

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one plac

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plug

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plu

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu

Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload func

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin <= 1

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An atta

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in D. Relton Medialist plugin <= 1.3.9 versions.

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Jens Kuerschner Add to Calendar Button plugin <=

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins

Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may caus

Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause backgroun