2023

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network

ASP.NET Core Security Feature Bypass Vulnerability

ASP.NET Core Denial of Service Vulnerability

Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /gofo

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a secu

DataHub is an open-source metadata platform. The HMAC signature for DataHub Frontend sessions was being signed using a S

vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control th

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPFactory Products, Order & Customers Export for WooCommer

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Walter Pinem OneClick Chat to Order plugin <= 1.0.4.2

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Y

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Manag

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Countdown and CountUp, WooCommerce Sales Time

Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE)

Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another,

Azure DevOps Server Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance

Auth. (Shop Manager+) Stored Cross-Site Scripting (XSS) vulnerability in CedCommerce Recently viewed and most viewed pro

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DenK BV Actueel Financieel Nieuws – Denk Internet Solu

Cross-Site Request Forgery (CSRF) vulnerability in RedNao Donations Made Easy – Smart Donations allows Stored XSS.This i

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapte

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the log

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM pro

The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO

Auth. (ShopManager+) Stored Cross-Site Scripting (XSS) vulnerability in actpro Extra Product Options for WooCommerce plu

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Milesi ANAC XML Bandi di Gara plugin <= 7.5 ver

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in livescore.Bz BZScore – Live Score plugin <= 1.03

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Abu Bakar TWB Woocommerce Reviews plugin <= 1.7.5 vers

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 an

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user t

Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable inform

Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalatio

Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial o

Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentia

Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user

Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable deni

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0

Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable

Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authentic