2023

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via se

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, Identity

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbe

A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attac

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attack

ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the

In Apache Linkis <=1.3.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code

In Apache Linkis <=1.3.0 when used with the MySQL Connector/J in the data source module, an authenticated attacker could

Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vu

ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unau

A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbu

Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input san

This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization

In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in t

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated u

Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated u

A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to exe

AMI Megarac Weak password hashes for Redfish & API

Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive info

Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94

On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obtai

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could a

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configura

Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/i

A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflo

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the s

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE insta

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause an adversary to t

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force a

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when

A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device wh

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the r