2023

A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete a

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the

netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the a

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for

An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used

NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects.

NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiP

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances,

Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affect

The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl

The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions u

The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to

SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local priv

A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself throu

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acces

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of p

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Windows Defender Attack Surface Reduction Security Feature Bypass

DHCP Server Service Denial of Service Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows TCP/IP Denial of Service Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Windows Themes Remote Code Execution Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Dynamics Finance and Operations Cross-site Scripting Vulnerability

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

.NET Framework Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability