2023

A flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user coul

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerab

A use-after-free flaw was found in the Linux kernel MCTP (Management Component Transport Protocol) functionality. This i

A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user conne

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a

The Simple Membership WP user Import plugin for WordPress is vulnerable to SQL Injection via the ‘orderby’ parameter in

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.

A buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javas

An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted jav

Alotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow

Alotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default admi

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts i

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on b

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege esca

Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vector

EXFO - BV-10 Performance Endpoint Unit misconfiguration. System configuration file has misconfigured permissions

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user. Unit has an undocumented hard-coded privileged user

EXFO - BV-10 Performance Endpoint Unit authentication bypass User can manually manipulate access enabling authentication

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors.

H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may all

A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is

A vulnerability has been found in manikandan170890 php-form-builder-class and classified as problematic. Affected by thi

A vulnerability, which was classified as problematic, was found in earclink ESPCMS P8.21120101. Affected is an unknown f

A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management Sys

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the

A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\

A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' esca

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines

A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c fil

A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access contro

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service be

cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (sla

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. When

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15

An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15.5.7, all versions start

Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allow

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15.5.7, all versions start

Incorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15.6 prior to 15.6.4, and

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions starting from 15.6 befor

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions start

An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starti

Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.

Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of servic