2023

Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parame

Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. A

IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbit

IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of e

IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users

IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by se

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash thro

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an un

An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`,

ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is

libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to

Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phra

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write ove

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell

An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGene

Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the

An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by defau

Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perfo

In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input pa

In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting i

Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call.

Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This v

The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerabilit

The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication

Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution video carousel slider with lightbo

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in A. R. Jones Featured Image Pro Post Grid plugin <= 5.14 ve

Path Traversal issue in M-Files Classic Web versions below 23.6.12695.3 and LTS Service Release Versions before 23.2 LTS

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ono Oogami WP Chinese Conversion plugin <= 1.1.16 versions

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An

AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.

Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which

Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission t

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In

Cloud Explorer Lite is an open source cloud management platform. Prior to version 1.4.0, there is a risk of sensitive in

CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to

Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6

Netmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions p

Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in N

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-ba

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to ret

There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version

There is no limit on the number of login attempts in the web server for the SNAP PAC S1 Firmware version R10.3b. This co

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vu