2023

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially

Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploi

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corr

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write

An uncaught exception vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to cause the ma

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installati

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility

An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and bel

IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the sys

Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filteri

Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey

Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization

The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized

The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before gett

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the pri

An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starti

System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14 before 16.0.8, all versions start

Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, license, myid,

Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromise

Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a u

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to e

Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker who convinc

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap c

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap c

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The in

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled pac

An issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to execute arbitrary code v

In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password (on

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with kn

A vulnerability in the fosexec command of Brocade Fabric OS after Brocade Fabric OS v9.1.0 and, before Brocade Fabric OS

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation o

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafte

In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type fun

In certain EZVIZ products, two stack buffer overflows in netClientSetWlanCfg function of the EZVIZ SDK command server ca

When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no l

A website could have obscured the full screen notification by using the file open dialog. This could have led to user co

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a pote

An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations.

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPa

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Fun

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Fun

Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .green

A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS co

pnpm is a package manager. It is possible to construct a tarball that, when installed via npm or parsed by the registry

Versions of the package underscore-keypath from 0.0.11 are vulnerable to Prototype Pollution via the name argument of th

LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure.