2023

Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affec

Memory safety bugs present in Firefox 114. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidenc

A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object was freed and

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to

Frauscher Sensortechnik GmbH FDS001 for FAdC/FAdCi v1.3.3 and all previous versions are vulnerable to a path traversal v

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerabilit

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in t

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerabi

Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password

All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all req

The Tutor LMS WordPress plugin before 2.2.1 does not implement adequate permission checks for REST API endpoints, allowi

The ND Shortcodes WordPress plugin before 7.0 does not validate some shortcode attributes before using them to generate

Memory Corruption in WLAN HOST while fetching TX status information.

Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.

Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.

Memory Corruption in WLAN HOST while parsing QMI response message from firmware.

Memory Corruption in Audio while allocating the ion buffer during the music playback.

Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption.

Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory.

Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received

In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalati

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of servi

In wlan firmware, there is possible system crash due to an uncaught exception. This could lead to remote denial of servi

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service

In wlan firmware, there is possible system crash due to an integer overflow. This could lead to remote denial of service

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote

IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by p

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privi

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can c

Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.

Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary cod

Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain

Cross Site Request Forgery vulnerability in ZZCMS v.2023 and earlier allows a remote attacker to gain privileges via the

The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker cou

`tktchurch/website` contains the codebase for The King's Temple Church website. In version 0.1.0, a Stripe API key was f

Sealos is a Cloud Operating System designed for managing cloud-native applications. In version 4.2.0 and prior, there is

Products.CMFCore are the key framework services for the Zope Content Management Framework (CMF). The use of Python's mar

CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many

AnyDesk 7.0.8 allows remote Denial of Service.

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a pot

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutral

An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special element

The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0.

The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. T

A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experi