2023

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N

Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 al

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain se

An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain se

An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Ju

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Ser

In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to

An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filteri

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a mali

Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a mali

Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products,

Improper Encoding or Escaping of Output in GitHub repository froxlor/froxlor prior to 2.0.21.

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. When Auto-G

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Aut

An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory

Envoy is a cloud-native high-performance edge/middle/service proxy. Envoy’s HTTP/2 codec may leak a header map and bookk

A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.

mx-chain-go is the official implementation of the MultiversX blockchain protocol, written in golang. When executing a re

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the chan

Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a he

Umbraco is a ASP.NET CMS. Under rare conditions a restart of Umbraco can allow unauthorized users access to admin-level

An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel acce

An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channe

An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the cha

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive infor

Controller DoS due to buffer overflow in the handling of a specially crafted message received by the controller. See Hon

Server information leak of configuration data when an error is generated in response to a specially crafted message. See

Experion server may experience a DoS due to a heap overflow which could occur when handling a specially crafted message

Experion server may experience a DoS due to a stack overflow when handling a specially crafted message.

JavaScript pre-processing can be used by the attacker to gain access to the file system (read-only access on behalf of u

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bullwark allows Path Tra

Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute

OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to ex

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.3 before 15.11.10, all versions sta

The User Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.0.1

Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 an

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and

An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. There are infinit

ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjac

Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attac

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analyt

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GM

Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesyst

In DMPixelLogger_ProcessDmCommand of DMPixelLogger.cpp, there is a possible out of bounds read due to a missing bounds c

there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with S