2023

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their u

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote

Under certain configurations, an attacker can login to Aruba EdgeConnect Enterprise Orchestrator without supplying a mul

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could al

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authen

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

Multiple vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow

A potential security vulnerability has been identified in HPE OfficeConnect 1820, and 1850 switch series. The vulnerabil

A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnera

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnera

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change

WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33.

A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unkno

Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch pri

Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3,

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32.

A vulnerability has been found in fossology and classified as problematic. This vulnerability affects unknown code. The

A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unkno

A vulnerability has been found in ghostlander Halcyon and classified as critical. Affected by this vulnerability is the

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.

The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a

A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user inp

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br

A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's br

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.

NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.

NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could allow an authenticated user to gain privilege

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due t

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnera

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to SQL injection. A remote attacker c

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 could disclose sensitive information to an authenti

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which cou

Discourse Mermaid (discourse-mermaid-theme-component) allows users of Discourse, open-source forum software, to create g

Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.

ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 ar

KubePi is a k8s panel. The jwt authentication function of KubePi through version 1.6.2 uses hard-coded Jwtsigkeys, resul

Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.

Uniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.

The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to s

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec