2023

Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head in

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may

Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the cont

An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, rem

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code

A flaw was found in the Ansible Automation Platform. When creating a new keypair, the ec2_key module prints out the priv

An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture c

A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected i

An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensiti

A flaw was found in Red Hat OpenShift Data Science. When exporting a pipeline from the Elyra notebook pipeline editor as

Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a re

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users

Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to cha

A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostna

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploit

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a

A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an inse

Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.

Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input

Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attac

Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch pr

Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileg

A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplyi

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race conditio

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environ

This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the uploa

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the corr

DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could

A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the

Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to ret

The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote

QSige statistics are affected by a remote SQLi vulnerability. It has been identified that the web application does not c

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficien

The QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has suffi

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource

It has been identified that the web application does not correctly filter input parameters, allowing SQL injections, DoS

All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrat

The file upload functionality is not implemented correctly and allows uploading of any type of file. As a prerequisite,

A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windo

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versio

cashIT! - serving solutions. Devices from "PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH" to 03.A06rks 2023.02.37 are

Memory corruption in Automotive Display while destroying the image handle created using connected display driver.

Memory corruption while invoking callback function of AFE from ADSP.

Memory corruption while parsing the ADSP response command.

Memory corruption in DSP Service during a remote call from HLOS to DSP.

Transient DOS in WLAN Firmware while parsing rsn ies.

Transient DOS in WLAN Firmware while parsing a NAN management frame.

Memory Corruption in HLOS while registering for key provisioning notify.