CVEs published August 11, 2023
155 CVEs were published on August 11, 2023: 2 critical, 36 high. Browse them by severity, product and exploitation status.
- Published
- 155
- Critical
- 2
- High
- 36
- Medium
- 57
- Low
- 12
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 28
Most affected products
- Intel(R) NUC BIOS firmware
- 8
- eProsima Fast-DDS
- 6
- Intel(R) Processors
- 6
- Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- 6
- Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- 4
- Mattermost · github.com/mattermost/mattermost-server/v6
- 4
- Intel(R) NUCs
- 3
- Genians Genian NAC · Genians Genian ZTNA
- 2
- HCL Software HCL Traveler To Do
- 2
- Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- 2
Critical 2
High 36
- CVE-2023-39949Improper validation of sequence numbers leading to remotely reachable assertion failureeProsima Fast-DDS
- CVE-2023-39948Uncaught fastcdr exception (Unexpected CDR type received) crashing fastddseProsima Fast-DDS
- CVE-2023-39947Another heap overflow in push_back_helpereProsima Fast-DDS
- CVE-2023-39946Heap overflow in push_back_helper due to a CDR messageeProsima Fast-DDS
- CVE-2023-39945Malformed serialized data in a data submessage leads to unhandled exceptioneProsima Fast-DDS
- CVE-2023-39534Malformed GAP submessage triggers assertion failureeProsima Fast-DDS
- CVE-2023-39417Postgresql: extension script @substitutions@ within quoting allow sql injectionRed Hat Advanced Cluster Security · Red Hat Enterprise L… +5
- CVE-2023-3864SQL injection vulnerability in Snow License ManagerSnow Software SLM
- CVE-2023-39553Apache Airflow Drill Provider Arbitrary File Read VulnerabilityApache Software Foundation Apache Airflow Drill Provider… +1
- CVE-2023-40254Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0…Genians Genian NAC · Genians Genian ZTNA
- CVE-2023-3823Security issue with external entity loading in XML without enabling itPHP Group PHP
- CVE-2023-34438Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local…Intel(R) NUC BIOS firmware
- CVE-2022-36372Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege…Intel(R) NUC BIOS firmware
- CVE-2023-22449Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via…Intel(R) NUC BIOS firmware
- CVE-2023-34086Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via…Intel(R) NUC BIOS firmware
- CVE-2023-32617Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a…Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Comp…
- CVE-2023-25757Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable…Intel(R) Unison(TM) software
- CVE-2022-29887Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to…Intel(R) Manageability Commander software
- CVE-2023-29494Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of…Intel(R) NUCs
- CVE-2022-37336Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege…Intel(R) NUC
- CVE-2023-27515Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable…Intel(R) DSA software
- CVE-2023-28380Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially…Intel(R) AI Hackathon software
- CVE-2023-28714Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may…Intel(R) PROSet/Wireless WiFi software for Windows
- CVE-2023-28385Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to…Intel(R) NUC Pro Software Suite for Windows
- CVE-2023-26587Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation…Intel(R) Easy Streaming Wizard software
Show all 36 entriesShow fewer entries
- CVE-2022-45112Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable…Intel(R) VROC software
- CVE-2022-41804Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to…Intel(R) Xeon(R) Processors
- CVE-2023-25773Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated…Intel(R) Unite(R) Hub software installer for Windows
- CVE-2022-37343Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of…Intel(R) Processors
- CVE-2022-38102Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may…Intel(R) Converged Security and Management Engine
- CVE-2022-36392Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94…Intel(R) AMT and Intel(R) Standard Manageability in Intel (…
- CVE-2022-40964Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially…Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-46329Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation…Intel(R) PROSet/Wireless WiFi software
- CVE-2022-27635Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially…Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2021-28427Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
- CVE-2021-28835Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
Medium, low and unrated 117
- CVE-2023-0871An XML External Entity injection vulnerabilityThe OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- CVE-2023-32267OpenText / Micro Focus ArcSight Management Center Remote VulnerabilityArcSight Management Center
- CVE-2023-39418Postgresql: merge fails to enforce update or select row security policiesRed Hat Enterprise Linux · Red Hat Software Collections +1
- CVE-2023-3937Cross site scripting vulnerabilities in Snow License ManagerSnow Software Snow License Manager
- CVE-2023-4108Audit logging fails to sanitize post metadataMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4107Incorrect authorization allows a user manager to update a system adminMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4106A guest user can perform various actions on public playbooksMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4105Attachment of deleted message in a thread remains accessible and downloadableMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-40253Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian…Genians Genian NAC · Genians Genian ZTNA
- CVE-2023-32663Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable…Intel(R) RealSense(TM) SDKs in
- CVE-2023-32543Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation…Intel(R) ITS sofware
- CVE-2023-32547Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to…MAVinci Desktop Software for Intel(R) Falcon 8+
- CVE-2023-32609Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially…Intel Unite(R) android application
- CVE-2023-34349Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local…Intel(R) NUC BIOS firmware
- CVE-2023-32285Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local…Intel(R) NUC BIOS firmware
- CVE-2023-22330Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure…Intel(R) NUC BIOS firmware
- CVE-2023-22356Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via…Intel(R) NUC BIOS firmware
- CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit…Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Ex…
- CVE-2023-30760Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-33877Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-33867Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-29243Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-34427Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-32656Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an…Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-29151Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable…Intel(R) PSR SDK
Show all 117 entriesShow fewer entries
- CVE-2023-31246Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially…Intel(R) SDP Tool software
- CVE-2023-34355Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft…Intel(R) Server Board M10JNP2SB integrated BMC video drivers
- CVE-2022-44612Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to…Intel(R) Unison(TM) software
- CVE-2023-29500Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to…Intel(R) NUCs
- CVE-2023-27887Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure…Intel(R) NUCs
- CVE-2023-28823Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an…Intel(R) oneAPI Toolkit and component software installers
- CVE-2023-27391Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged…Intel(R) oneAPI Toolkit and component software installers
- CVE-2023-28711Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user…Hyperscan Library maintained by Intel
- CVE-2022-29470Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to potentially enable…Intel DTT Software
- CVE-2023-28658Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially…Intel(R) oneMKL software
- CVE-2022-25864Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable…Intel(R) oneMKL software
- CVE-2023-27392Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to…Intel(R) Support android application
- CVE-2023-27509Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially…Intel(R) ISPC software installers
- CVE-2023-27505Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may…Intel(R) Advanced Link Analyzer Standard Edition software i…
- CVE-2023-25944Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user…Intel(R) VCUST Tool software
- CVE-2023-28405Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to…Intel(R) Distribution of OpenVINO(TM) Toolkit
- CVE-2023-27506Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to…Intel(R) Optimization for Tensorflow software · tensorfl… +2
- CVE-2023-23908Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable…3rd Generation Intel(R) Xeon(R) Scalable processors
- CVE-2023-22276Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an…Intel(R) Ethernet Controllers and Adapters E810 Series
- CVE-2023-22841Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and…System Firmware Update Utility (SysFwUpdt) for some Intel(R…
- CVE-2023-23577Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an…ITE Tech consumer infrared drivers for Intel(R) NUC
- CVE-2022-40982Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R)…Intel(R) Processors
- CVE-2023-25182Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to…Intel(R) Unite(R) Client software for Mac
- CVE-2023-22840Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to…Intel(R) oneVPL GPU software
- CVE-2023-22338Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable…Intel(R) oneVPL GPU software
- CVE-2022-43505Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…Intel(R) Processors
- CVE-2022-27879Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…Intel(R) Processors
- CVE-2022-38083Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information…Intel(R) Processors
- CVE-2022-44611Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation…Intel(R) Processors
- CVE-2022-38973Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December…Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- CVE-2022-41984Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and…Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- CVE-2023-24016Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated…Intel(R) Quartus(R) Prime Pro and Standard edition software…
- CVE-2022-43456Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may…Intel(R) RST software
- CVE-2023-25775Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user…Intel(R) Ethernet Controller RDMA driver for linux
- CVE-2022-29871Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially…Intel(R) CSME software installer
- CVE-2022-38076Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to…Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-36351Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to…Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-34657Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially…Intel(R) PCSD BIOS
- CVE-2023-28938Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to…Intel(R) SSD Tools software
- CVE-2023-28736Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable…Intel(R) SSD Tools software
- CVE-2023-37512HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcherHCL Software HCL Traveler Companion
- CVE-2023-37513HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcherHCL Software HCL Traveler To Do
- CVE-2023-37511HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web contentHCL Software HCL Traveler To Do
- CVE-2023-4304Business Logic Errors in froxlor/froxlorfroxlor/froxlor
- CVE-2020-19952Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477…
- CVE-2020-20523Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary…gilacms/gila
- CVE-2020-23595Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive…
- CVE-2020-24075Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers…
- CVE-2020-24187An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null…
- CVE-2020-24221An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via…
- CVE-2020-24222Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute…
- CVE-2020-24804Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs.
- CVE-2020-24872Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute…
- CVE-2020-24904An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via…
- CVE-2020-24922Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to…com.xuxueli:xxl-job
- CVE-2020-24950SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute…
- CVE-2020-25915Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via…thinkcmf/thinkcmf
- CVE-2020-27449Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote…
- CVE-2020-27514Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to…
- CVE-2020-27544An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote…
- CVE-2020-28717Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to…
- CVE-2020-28840Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and…
- CVE-2020-28848CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
- CVE-2020-28849Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive…
- CVE-2020-35139An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of…ryu
- CVE-2020-35141An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial…ryu
- CVE-2020-35990Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527…
- CVE-2020-36023An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted…
- CVE-2020-36024An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted…
- CVE-2020-36034SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code…
- CVE-2020-36037An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the…
- CVE-2020-36082File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via…
- CVE-2020-36136SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in…
- CVE-2020-36138An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service…
- CVE-2021-25786An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to…
- CVE-2021-25856An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php.
- CVE-2021-25857An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type…
- CVE-2021-26504Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information…
- CVE-2021-26505Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via…hellojs
- CVE-2021-27523An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information…
- CVE-2021-27524Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the…braft-editor
- CVE-2021-28025Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a…
- CVE-2021-28411An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0…
- CVE-2021-28429Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause…
- CVE-2021-29057An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service.node-worker-threads-pool
- CVE-2021-29378SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET…
- CVE-2021-3236vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all…
- CVE-2023-22955An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-22956An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-22957An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-40260EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and…
- CVE-2023-40267GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.gitpython