2023

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability. An unauthentic

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated

An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.

An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Ther

Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote att

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the a

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enume

Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read ar

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attack

IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper valid

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the min

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-si

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-si

Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by mod

A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been classified as critical. This a

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls t

A vulnerability was found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected by thi

A vulnerability has been found in Campcodes Simple Student Information System 1.0 and classified as critical. Affected b

A vulnerability, which was classified as critical, was found in Campcodes Simple Student Information System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in Campcodes Simple Student Information System 1.0. Th

A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability

A vulnerability classified as critical has been found in Campcodes Simple Student Information System 1.0. This affects a

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NU

NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untru

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a ma

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular u

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular

Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.

A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.

A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issu

Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowin

Connections to external data sources, like e-mail autoconfiguration, were not terminated in case they hit a timeout, ins

Documents operations, in this case "drawing", could be manipulated to contain invalid data types, possibly script code.

Documents operations could be manipulated to contain invalid data types, possibly script code. Script code could be inje

Presentations may contain references to images, which are user-controlled, and could include malicious script code that

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before

RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent

A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the

A vulnerability, which was classified as critical, was found in SourceCodester Visitor Management System 1.0. Affected i

Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the fo

A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/t

A vulnerability classified as critical has been found in Lissy93 Dashy 2.1.1. This affects an unknown part of the file /