2023

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user ge

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to mem

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue m

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of servic

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within t

Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of priv

/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with a

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuratio

Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly

The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter befo

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule us

Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration fi

A vulnerability was found in Pointware EasyInventory 1.0.12.0 and classified as critical. This issue affects some unknow

A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privi

An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve loca

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local priv

OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenD

An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update t

An out-of-bounds write vulnerability exists in the MOL2 format attribute and value functionality of Open Babel 3.1.1 and

An out-of-bounds write vulnerability exists in the Gaussian format orientation functionality of Open Babel 3.1.1 and mas

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET

Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary

SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.

An issue has been discovered in GitLab EE affecting all versions starting from 12.8 before 15.11.11, all versions starti

It is identified a format string vulnerability in ASUS RT-AX56U V2 & RT-AC86U. This vulnerability is caused by directly

A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbit

A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbit

A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitr

Galaxy Software Services Vitals ESP is vulnerable to using a hard-coded encryption key. An unauthenticated remote attack

There is a Cross‑Site Scripting (XSS) vulnerability in Esri ArcGIS Enterprise Sites versions 10.9 and below that may all

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management Sy

There is a stored Cross‑Site Scripting (XSS) vulnerability in Esri Portal for ArcGIS Sites versions 11.1 and below that

A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Admi

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access

ShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation of the lock opening mech

In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Adv

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion (LFI) vulnerability via the componen

An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writa

Attackers can exploit an open API listener on SteelSeries GG 36.0.0 to create a sub-application that will be executed au

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

A potential security vulnerability has been identified in the Enterprise Server Common Web Administration (ESCWA) compo

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its

Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerabilit