2023

fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names

CloudPanel v2.2.2 allows attackers to execute a path traversal.

axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. T

The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused acros

Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance

The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerabili

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul

A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul

The affected product does not properly validate user-supplied data. If a user opens a maliciously for

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions star

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Th

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.

The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT

A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16

Landscape allowed URLs which caused open redirection.

Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain

Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator.

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CS

A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gat

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker ga

In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash.

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.

There is a command injection vulnerability in the Tenda G103 Gigabit GPON Terminal with firmware version V1.0.0.5. If an

In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In keymange, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosur

In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with Sys

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privileg

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privileg

In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with S

In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privileg

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wit

In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege wit

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privileg

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege wit

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc