2023

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to c

HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote a

RIFARTEK IOT Wall transportation function has insufficient filtering for user input. An authenticated remote attacker wi

RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user pri

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vul

HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An au

HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated rem

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can

HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulne

HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacke

Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authentica

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general us

Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker wi

Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physica

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.

The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumpti

In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affec

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the fu

A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is th

A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulner

A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the func

A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affe

A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the f

RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO

An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attac

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discove

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability v

A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue i

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopp

redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can se

A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vuln

A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unk

A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue af

A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the func

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the fil

A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the fi

A vulnerability was found in grinnellplans-php up to 3.0. It has been declared as critical. Affected by this vulnerabili

A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the fu

A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by th

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown fun

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affe

A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is

Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing e

TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `fil