2023

Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which co

Cross-site Scripting (XSS) vulnerability in NetIQ iManager prior to version 3.2.6 allows attacker to execute malicious s

An improper access control vulnerability was identified in the Realtek audio driver. A local authenticated malicious use

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sen

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger t

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject fi

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running fir

Unauthenticated denial of service

Authenticated denial of service

File existence disclosure vulnerability in NetIQ Identity Manager plugin prior to version 4.8.5 allows attacker to deter

All versions of the package vagrant.js are vulnerable to Command Injection via the boxAdd function due to improper input

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regul

All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to

All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionCont

Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tenso

Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution (RCE) via the clone(), pull(),

All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to

All versions of the package puppet-facter are vulnerable to Command Injection via the getFact function due to improper

IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptogra

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanit

All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other

In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. T

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource

In multiple functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resou

In many functions of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resource

In pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to t

The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" bu

In AutomaticZenRule of AutomaticZenRule.java, there is a possible failure to persist permissions settings due to resourc

The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written

In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. Th

In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can overl

In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local p

A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local p

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privilege

Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.

Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the Doc

For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invali

uptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to gain root privileges b

SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via t

An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered when

Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version W

An issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the