2023

An improper authorization vulnerability [CWE-285]  in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 all

A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below,

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to

An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0

A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions

A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versio

A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet Fo

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio

A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may a

An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and bel

A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all versions

Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 a

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods ar

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM o

A malicious user can cause log files to be written to a directory that they do not have permission to write to.

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 a

Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library do

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservic

APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in

In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sen

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.

It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net

Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would load portions of maliciously

Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to

Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active sessio

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.

Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via descripti

containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where

containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there wa

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city paramet

TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province par

Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclos

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without author

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

Qaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name parameter. It allows a use

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file upl

Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload ca

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer on

A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown

A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unk

A vulnerability was found in Netgear WNDR3700v2 1.0.1.14. It has been rated as problematic. This issue affects some unkn