2023

Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.sta

pretix before 2023.7.2 allows Pillow to parse EPS files.

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditio

ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endp

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'la

Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating ema

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_

An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute

In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause se

discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encry

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A m

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo

Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to instal

Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to e

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function.

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function.

There is an unrestricted upload of file vulnerability in Generex CS141 below 2.06 version. An attacker could upload and/

This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and

A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sen

A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and c

WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal funct

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to t

An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privile

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxm

** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by use

JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to exec

Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.

JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API wi

JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-fo

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who ar

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow a

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenti

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injec

A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated

A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software

A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a reposit

A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Ser

A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS X

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated,

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauth