2023

Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation o

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disc

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the aff

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated

A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings.

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticate

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball s

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <= 2.6.4 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions.

An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulner

An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persi

Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of

An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Su

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol.

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success

There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management

There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point m

There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management p

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated rem

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code e

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code e

MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access

Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of serv

Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an

Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a deni

Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information di

Statamic is a flat-first, Laravel + Git powered CMS designed for building websites. In affected versions certain additio

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themeum WP Crowdfunding plugin <= 2.1.6 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sajjad Hossain Sagor WP Edit Username plugin <= 1.0.5

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability (requires PHP 8.x) in CodeBard CodeBard's Patron Button and W

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Photo Feed plugin <= 2.2.1 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Uno (miunosoft) Responsive Column Widgets plugin <

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name

Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the

Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 a

SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows at

SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive in

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network