2023

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Over

BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access

BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An att

Certain credentials within the BigFix Patch Management Download Plug-ins are stored insecurely and could be exposed to a

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-

e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versio

The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploita

User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Sc

In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access

Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 throug

An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the fi

Election Services Co. (ESC) Internet Election Service is vulnerable to SQL injection in multiple pages and parameters. T

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0

Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M

Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Skype for Business Elevation of Privilege Vulnerability

Microsoft QUIC Denial of Service Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Runtime Remote Code Execution Vulnerability

Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

Skype for Business Remote Code Execution Vulnerability

Skype for Business Remote Code Execution Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Skype for Business Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

Named Pipe File System Elevation of Privilege Vulnerability

Microsoft SQL Server Denial of Service Vulnerability

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Power Management Service Information Disclosure Vulnerability