2023

A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance acc

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only pri

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to c

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to c

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenti

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their us

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 tha

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-refe

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ o

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful e

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than i

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain a

General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote at

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManage

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and l

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially craft

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1

Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the r

Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit h

Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploi

Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap c

Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap cor

Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially

Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the r

Missing MAC layer security in Silicon Labs Wi-SUN Linux Border Router v1.5.2 and earlier allows malicious node to route

Missing MAC layer security in Silicon Labs Wi-SUN SDK v1.5.0 and earlier allows malicious node to route malicious messa

MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, s

Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive infor

McAfee Total Protection prior to 16.0.50 may allow an adversary (with full administrative access) to modify a McAfee spe

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock model(s) with

A cleartext transmission vulnerability exists in the Remote Management functionality of Netgear Orbi Router RBR750 4.6.8

A command execution vulnerability exists in the hidden telnet service functionality of Netgear Orbi Router RBR750 4.6.8.

A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A sp

A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS7

A vulnerability was found in zwczou WeChat SDK Python 0.3.0 and classified as critical. This issue affects the function

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote att

An authenticated attacker can leverage an exposed resource.db() accessor method to smuggle Python method calls via a Jin

An authenticated attacker can leverage an exposed “box” object to read and write arbitrary files from disk, provided tho

An authenticated attacker can leverage an exposed getattr() method via a Jinja template to smuggle OS commands and perfo

The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.

The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that