2023

In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs,

SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain op

Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an

SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user prov

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from th

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can b

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compro

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 3

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affec

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product s

Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomat

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulner

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0

Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi.

lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized poin

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This aff

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneV

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which c

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading

The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attack

The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow h

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filt

In Gitea through 1.17.1, repo cloning can occur in the migration function.

An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in thi

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local infor

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local informat

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local es