2023

A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a local atta

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown

A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing

A vulnerability was found in jfm-so piWallet. It has been rated as critical. Affected by this issue is some unknown func

A vulnerability was found in Nayshlok Voyager. It has been declared as critical. Affected by this vulnerability is an un

Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

A vulnerability has been found in Newcomer1989 TSN-Ranksystem up to 1.2.6 and classified as problematic. This vulnerabil

There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If 

Caret is vulnerable to an XSS attack when the user opens a crafted Markdown file when preview mode is enabled. This dire

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabil

In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because o

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerabili

Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a

Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value

Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resul

Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value poten

Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bu

Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, po

Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the b

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of inte

Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of servic

Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of i

A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the T

Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted

Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an att

Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP

Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory

Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resu

A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting i

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential informa

Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in comp

Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an a

Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attack

Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity

Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers t

Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an i

Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the conten

Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with

A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulati

A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is a

A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is t