2023

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Wi

Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applicati

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in A

The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows l

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fau

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows

Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Blu

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrar

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of un

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to p

Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of con

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to acce

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link

A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP

An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack G

An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack G

A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A

GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code inj

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an

Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, ref

Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Beca

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properl

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-s

go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil

School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/

`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker cou

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior t

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username paramet

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server tha

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at th

An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function a

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at t

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.

An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoint

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring functio

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the C

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_*

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_*

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Po

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an ar

Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the c