2023

Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression vali

A stored cross-site scripting (XSS) vulnerability in IsarNet AG IsarFlow v5.23 allows authenticated attackers to execute

Cacti is an open source operational monitoring and fault management framework. There are two instances of insecure deser

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored

Cacti is an open source operational monitoring and fault management framework.Affected versions are subject to a Stored

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input paramet

Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of

Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitra

Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Softw

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform

An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automati

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack.

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters pr

Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the reques

Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execut

Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to e

Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authentica

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authentic

Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to

Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users t

Cerebrate before 1.15 lacks the Secure attribute for the session cookie.

Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.

Memory Corruption while accessing metadata in Display.

Memory corruption in Audio while validating and mapping metadata.

Memory corruption in Audio during playback session with audio effects enabled.

Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.

Memory Corruption due to improper validation of array index in Linux while updating adn record.

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.

Information disclosure in Automotive multimedia due to buffer over-read.

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects

ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField

disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Graysc

The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings i

IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain

IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in pla

IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to

hyper-bump-it is a command line tool for updating the version in project files.`hyper-bump-it` reads a file glob pattern

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacke