2023

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure

Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.

Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to ex

An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization

File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary co

Potential buffer overflow vulnerability in the Zephyr CAN bus subsystem

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because A

In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.

In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a

A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass Op

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow au

A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow au

A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. A specially crafted web page

OpenTelemetry, also known as OTel for short, is a vendor-neutral open-source Observability framework for instrumenting,

IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a loca

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of Y

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr

Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and

D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to

Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corr

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of t

Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An au

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted s

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to r

In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadio

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSet

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettin

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlIn

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsCon

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSe

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettin

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettin

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsContr

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDevice

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPa

1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a sym

ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or M

An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGu

File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbi

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC p

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft

Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete

Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user ca

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec