2023

Improper initialization implementation in Portmapper used in B&R Industrial Automation Automation Runtime <G4.93 allows

AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for r

The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerabilit

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users w

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which all

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with

Interactive Forms (IAF) in GX Software XperienCentral versions 10.33.1 until 10.35.0 was vulnerable to invalid data inpu

Interactive Forms (IAF) in GX Software XperienCentral versions 10.31.0 until 10.33.0 was vulnerable to cross site reques

Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, informatio

Local user may lead to privilege escalation using Gaia Portal hostnames page.

Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.

Authentication bypass vulnerability in Fujitsu network devices Si-R series and SR-M series allows a network-adjacent una

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticat

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vu

A vulnerability exists in the HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. Th

Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks

On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlay

RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/.

Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spr

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify

Cryptomator is data encryption software for users who store their files in the cloud. Prior to version 1.9.2, the MSI in

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unifie

DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulne

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation f

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The Ba

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2,

Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes i

Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,

Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fie

There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authenti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon p

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpxpo PostX – Gutenberg Post Grid Blocks plugin <= 2.9.9 v

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <

An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated att

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widg

Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache In

Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based bu

Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strin

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view C

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the

Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions.