2023

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to r

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit thi

Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerab

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerab

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi

Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi

Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will aff

Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation o

Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect se

The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerabi

Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect

Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerabili

Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service co

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

All versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when untrusted user input i

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to la

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch

Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certai

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to exec

Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to

Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to

Stack out of bound write vulnerability in CdmaSmsParser of RILD prior to SMR Jul-2023 Release 1 allows attackers to exec

Missing authentication vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to

An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privilege

Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime

Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in

Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated

Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Vers

GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incor

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.8, an incor

Loxone Miniserver Go Gen.2 through 14.0.3.28 allows an authenticated operating system user to escalate privileges via th

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC addre

The websocket configuration endpoint of the Loxone Miniserver Go Gen.2 before 14.1.5.9 allows remote authenticated admin

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.8, GLPI in

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP

AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-

AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based mess

Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.

In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A speciall

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of

An authenticated remote command injection vulnerability exists in the ArubaOS web-based management interface. Successful

A vulnerability in the ArubaOS web-based management interface could allow an unauthenticated remote attacker to conduct

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was