2023

The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the 'userpro' shortcode in versio

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of othe

An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via s

radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in

Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on t

Autodesk users who no longer have an active license for an account can still access cases for that account.

A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information v

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller a

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-

A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a maliciou

An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with

The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application err

A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system.

When Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file an out of bounds write may occur.

Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file.

It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a m

It was discovered that a user with Fleet admin permissions could upload a malicious package. Due to using an older versi

Kibana contains an embedded version of the Chromium browser that the Reporting feature uses to generate the downloadable

Statamic CMS is a Laravel and Git powered content management system (CMS). Prior to versions 3.4.15 an 4.36.0, HTML file

The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new

fastbots is a library for fast bot and scraper development using selenium and the Page Object Model (POM) design. Prior

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote u

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit

An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user cou

TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to versio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ H

authentik is an open-source identity provider. When initialising a oauth2 flow with a `code_challenge` and `code_method`

OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Sett

SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to e

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re

A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated,

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond

The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specia

Possible variant of CVE-2021-3434 in function le_ecred_reconf_req.

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Se

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values,

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buff