2023

Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convi

Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T

The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type sett

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_

The Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and i

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_c

The Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_template

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_fix_royal_compa

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_requir

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_requir

A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers

A vulnerability was found in mapoor voteapp. It has been rated as critical. Affected by this issue is the function creat

A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects t

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injectio

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerabi

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye

A vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corrupti

A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Soli

A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker wi

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker wi

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker wi

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All

A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All

Affected devices do not contain an Immutable Root of Trust in Hardware. With this the integrity of the code executed on

Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. E-Wid

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. Speci

The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel at

api/views/user.py in LibrePhotos before e19e539 has incorrect access control.

tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a p

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, p

SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious

Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC ap

An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to a

SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of

In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return

SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752,

The ABAP Keyword Documentation of SAP NetWeaver Application Server - versions 702, 731, 740, 750, 751, 752, 753, 754, 75

In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be abl

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits