2023

An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntime

Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticate

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network co

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network co

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote com

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network c

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722. It has been classified as critical. A

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230722 and classified as critical. This issue

A vulnerability has been found in Academy LMS 6.0 and classified as problematic. This vulnerability affects unknown code

A vulnerability, which was classified as problematic, has been found in PHP Jabbers Rental Property Booking 2.0. Affecte

A vulnerability classified as problematic was found in PHP Jabbers Taxi Booking 2.0. Affected by this vulnerability is a

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.9 before 16.0.8, all versions start

A vulnerability classified as problematic has been found in PHP Jabbers Cleaning Business 1.0. Affected is an unknown fu

A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue a

A vulnerability was found in PHP Jabbers Service Booking Script 1.0. It has been declared as problematic. This vulnerabi

A vulnerability was found in PHP Jabbers Shuttle Booking Software 1.0. It has been classified as problematic. This affec

Race Condition within a Thread in GitHub repository answerdev/answer prior to v1.1.1.

Missing Authorization in GitHub repository answerdev/answer prior to v1.1.1.

A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issu

An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open th

Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary cod

Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to us

SpiderControl SCADA Webserver versions 2.08 and prior are vulnerable to path traversal. An attacker with administrative

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibS

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulne

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be.

Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to exe

Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signat

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit thi

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User ac

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allow

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending un

Audit logs on F5OS-A may contain undisclosed sensitive information.  Note: Software versions which have reached End of

OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administrat

Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition t

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whi

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious scrip