2023

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Manag

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

SOLDR (System of Orchestration, Lifecycle control, Detection and Response) 1.1.0 allows stored XSS via the module editor

In Dataiku DSS 11.2.1, an attacker can download other Dataiku files that were uploaded to the myfiles section by specify

The Sub-IoT implementation of the DASH 7 Alliance protocol has a vulnerability that can lead to an out-of-bounds write

An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1 that may allow remote inje

API Platform Core is the server component of API Platform: hypermedia and GraphQL APIs. Resource properties secured with

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction o

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Display

An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a

In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev retur

In the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the drm_gem_shmem_get_sg_table r

In the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the module_get_next_page return value (expect

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an of_find_device_by_node reference aft

A vulnerability classified as critical has been found in SourceCodester Online Catering Reservation System 1.0. This aff

A vulnerability was found in SourceCodester Online Student Management System 1.0. It has been rated as critical. Affecte

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. T

GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data b

This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, whi

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue inst

An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/as

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 co

An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConf

A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsi

Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records wh

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a de

A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transf

Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can e

Improper neutralization of input during web page generation allows an authenticated attacker with access to a restricted

Improper neutralization of input during web page generation allows an unauthenticated attacker to submit malicious Javas

An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET pa

Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could pot

Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600, F800, F810 integrated hardware management software contains

In dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a heap buffer overflow. Thi

In onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due to a confused deputy.

In phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds write due to a missing bo

In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization.

In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path

In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This

In multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory due to improper locking

In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. T

In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. Thi

In resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the microphone privacy indicator

In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could le

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due t