2023

A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows

Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow In

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exyn

Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python

Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not res

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the u

A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JB

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that reference

php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a

Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, an

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit

Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9,

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is config

Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspac

An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR leve

An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

An issue was discovered by Elastic whereby the Documents API of App Search logged the raw contents of indexed documents

Umbraco is an ASP.NET content management system (CMS). Starting in 10.0.0 and prior to versions 10.8.1 and 12.3.4, Umbr

main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Power Platform Connector Spoofing Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Win32k Elevation of Privilege Vulnerability

Microsoft Defender Denial of Service Vulnerability

Microsoft Word Information Disclosure Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

XAML Diagnostics Elevation of Privilege Vulnerability

Windows Sysmain Service Elevation of Privilege Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Internet Connection Sharing (ICS) Denial of Service Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

DHCP Server Service Denial of Service Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows Bluetooth Driver Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability