2023

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with el

A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated pri

A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated pri

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmw

A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacke

A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker w

A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker wi

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wit

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker wi

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local a

A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may a

A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may al

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmwa

Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmwar

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file download

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privilege

A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local at

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service.

A privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using Microsoft AutoPilot under

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local a

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runti

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerab

ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a `Lockout Policy` w

PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that t

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacke

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loc

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loca

Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.

jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512.

jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node

An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it i

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requireme

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execut

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit hea

The Spotfire Connectors component of TIBCO Software Inc.'s Spotfire Analyst, Spotfire Server, and Spotfire for AWS Marke

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 version

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Vyas Dipen Top 25 Social Icons plugin <= 3.1 ver

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Social Feed | All social media in one plac

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Post Sliders & Post Grids plug

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Map Plugins Basic Interactive World Map plugin <= 2

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Apollo13Themes Apollo13 Framework Extensions plu

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.

A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linu