2023

SysAid before 23.2.15 allows Indirect Object Reference (IDOR) attacks to read ticket data via a modified sid parameter t

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to imprope

IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to mi

Usedesk before 1.7.57 allows profile stored XSS.

Usedesk before 1.7.57 allows filter reflected XSS.

Usedesk before 1.7.57 allows chat template injection.

The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comman

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collect

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by

The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose"

A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation

Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bounc

An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could ca

An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP Endp

Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP

Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Co

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows

Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes

Cross-Site Request Forgery (CSRF) vulnerability in Pandora FMS on all allows Cross-Site Scripting (XSS). This vulnerabil

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pandora FMS on all

Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P

Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pandora FMS on all allows File Discovery. Th

An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve se

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and

Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's int

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KC Group E-Commerc

On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Serv

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software

An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify

There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability b

Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious s

Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious

Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local maliciou

Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability.

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on th

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buff

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untruste

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bou

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Bu