2023

In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could

In bindOutputSwitcherAndBroadcastButton of MediaControlPanel.java, there is a possible launch arbitrary activity under S

In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to

In multiple functions of multiple files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction f

In various functions of various files, there is a possible way to bypass the DISALLOW_DEBUGGING_FEATURES restriction for

In onResume of AppManagementFragment.java, there is a possible way to prevent users from forgetting a previously connect

In multiple functions of cdm_engine.cpp, there is a possible use-after-free due to improper locking. This could lead to

In btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type due to improperly used c

In sdpu_build_uuid_seq of sdp_discovery.cc, there is a possible out of bounds write due to a use after free. This could

In multiple functions of WVDrmPlugin.cpp, there is a possible use after free due to a race condition. This could lead to

snappy-java is a fast compressor/decompressor for Java. Due to use of an unchecked chunk length, an unrecoverable fatal

Cross-Site Request Forgery (CSRF) vulnerability allows arbitrary file upload in Shingo Intrepidity plugin <= 1.5.1 versi

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zestard Technologies Admin side data storage for Contact F

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with th

The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable d

Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 thro

The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start variou

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of danger

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a rem

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a remote authenticated attacker to execute arbitrary

IBM Security Directory Suite VA 8.0.1 could allow an attacker to cause a denial of service due to uncontrolled resource

Grav is a flat-file content management system. Prior to version 1.7.42, the patch for CVE-2022-2073, a server-side templ

Grav is a flat-file content management system. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prev

Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the `GravExtension.filt

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 cha

A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated,

libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215.

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malfo

Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at

Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO pac

Microsoft Exchange Server Remote Code Execution Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

NuGet Client Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

.NET Framework Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via