2023

An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s se

A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a

A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) tha

In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript d

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSec

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSec

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecur

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. T

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects

Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1.

Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affe

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects

ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN f

SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can i

SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote a

A vulnerability, which was classified as critical, has been found in 07FLY CRM V2. This issue affects some unknown proce

The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and includ

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting i

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A S

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file r

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is s

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

Strapi is the an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the l

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknow

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.1

Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This iss

Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation. This issue affects

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused loca

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl

Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fix

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fix

A SQL injection vulnerability in Cloudroits Website Job Search v.15.0 allows a remote authenticated attacker to execute

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fix

SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the

Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbi

Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privil

CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via cr

An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute htm

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake sta

Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a miss

A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper ac

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allo

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improp