2023

The web application stores credentials in clear text in the "admin.xml" file, which can be accessed without logging into

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack t

An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable c

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and

An issue in Dolibarr ERP CRM v.17.0.1 and before allows a remote privileged attacker to execute arbitrary code via a cra

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation.

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successfu

NVIDIA DGX H100 BMC contains a vulnerability in the web UI, where an attacker may cause improper input validation. A suc

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials

NVIDIA DGX H100 BMC contains a vulnerability in the KVM service, where an attacker may cause improper input validation.

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker

NVIDIA DGX H100 baseboard management controller (BMC) contains a vulnerability in a web server plugin, where an unauthen

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause cor

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI in

File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the action

A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage hos

A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner con

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center an

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and

MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote code

MiniTool Movie Maker 7.0 contains an insecure installation process that allows attackers to achieve remote code executio

MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows attackers to achieve remote code

MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execut

MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code

blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turne

phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions `0.3.3+8.

Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provi

Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free

Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative p

Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to e

SQL injection vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerability could allow

Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical info

Incorrect authorisation in ekorCCP and ekorRCI, which could allow a remote attacker to obtain resources with sensitive i

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain

A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in ce

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields us

A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s s

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions startin

SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted scrip

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under ce

The web application that owns the device clearly stores the credentials within the user management sectio

Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the

Sending some requests in the web application of the vulnerable device allows information to be obtained due to the lack

The absence of filters when loading some sections in the web application of the vulnerable device allows po

An issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain sensitive information and ex

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via g

An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The imple