2023

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This aff

A vulnerability, which was classified as problematic, has been found in dpup fittr-flickr. This issue affects some unkno

A vulnerability classified as problematic was found in jianlinwei cool-php-captcha up to 0.2. This vulnerability affects

Cross-site Scripting (XSS) - Stored in GitHub repository craigk5n/webcalendar prior to master.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1189.

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrat

RSSHub is an open source RSS feed generator. RSSHub is vulnerable to Server-Side Request Forgery (SSRF) attacks. This vu

A vulnerability was found in ityouknow favorites-web. It has been rated as problematic. Affected by this issue is some u

A vulnerability classified as critical has been found in SourceCodester Online Flight Booking Management System. This af

A vulnerability was found in SourceCodester Online Flight Booking Management System. It has been rated as critical. Affe

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue a

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correc

A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client creden

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Mac

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the

keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs

wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elyt

An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other pr

Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input saniti

A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verificatio

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a v

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary file

DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of pr

Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SP

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credenti

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path travers

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, w

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locati

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can re

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read,

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow

In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.

Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to

The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attacke

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter a

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. Th

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially craf

A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Netw

A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker

An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-ba