2023

Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

Prosys OPC UA Simulation Server version prior to v5.3.0-64 and UA Modbus Server versions 1.4.18-5 and prior do not suffi

In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for adm

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered

SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths

In Boa, there is a possible command injection due to improper input validation. This could lead to remote escalation of

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote esc

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala

In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escala

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi

In mtk-aie, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi

In mtk-isp, there is a possible use after free due to a logic error. This could lead to local escalation of privilege wi

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with

In disp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wi

In ccu, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of

In gpu drm, there is a possible stack overflow due to a missing bounds check. This could lead to local escalation of pri

In vow, there is a possible information disclosure due to a race condition. This could lead to local information disclos

In vow, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In watchdog, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation o

In isp, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat

In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation o

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In mdp, there is a possible out of bounds write due to incorrect error handling. This could lead to local escalation of

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes, and Spinnaker's Ro

MyBB before 1.8.33 allows Directory Traversal. The Admin CP Languages module allows remote authenticated users, with hig

ViewVC, a browser interface for CVS and Subversion version control repositories, as a cross-site scripting vulnerability

The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, mess

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In Fort

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiPortal versions 6.0.0 thro

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio

Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE

MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector pa

The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for e

The "Survey Maker – Best WordPress Survey Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via

The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an im

A vulnerability classified as problematic was found in ummmmm nflpick-em.com up to 2.2.x. This vulnerability affects the

A vulnerability, which was classified as problematic, has been found in ahmyi RivetTracker. This issue affects some unkn

A vulnerability classified as problematic has been found in ethitter WP-Print-Friendly up to 0.5.2. This affects an unkn

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rat

A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is

Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.

Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the inform

Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded administrator credentials. An unauthenticated remote attacker can