CVEs published August 11, 2023
155 CVEs were published on August 11, 2023: 2 critical, 36 high.
- Published
- 155
- Critical
- 2
- High
- 36
- Medium
- 57
- Low
- 12
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- Intel(R) NUC BIOS firmware
- 8
- eProsima Fast-DDS
- 6
- Intel(R) Processors
- 6
- Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- 6
- Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- 4
- Mattermost · github.com/mattermost/mattermost-server/v6
- 4
- Intel(R) NUCs
- 3
- Genians Genian NAC · Genians Genian ZTNA
- 2
- HCL Software HCL Traveler To Do
- 2
- Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- 2
Critical 2
High 36
- CVE-2023-39949Improper validation of sequence numbers leading to remotely reachable assertion failureeProsima Fast-DDS
- CVE-2023-39948Uncaught fastcdr exception (Unexpected CDR type received) crashing fastddseProsima Fast-DDS
- CVE-2023-39947Another heap overflow in push_back_helpereProsima Fast-DDS
- CVE-2023-39946Heap overflow in push_back_helper due to a CDR messageeProsima Fast-DDS
- CVE-2023-39945Malformed serialized data in a data submessage leads to unhandled exceptioneProsima Fast-DDS
- CVE-2023-39534Malformed GAP submessage triggers assertion failureeProsima Fast-DDS
- CVE-2023-39417Postgresql: extension script @substitutions@ within quoting allow sql injectionRed Hat Advanced Cluster Security · Red Hat Enterprise L… +5
- CVE-2023-3864SQL injection vulnerability in Snow License ManagerSnow Software SLM
- CVE-2023-39553Apache Airflow Drill Provider Arbitrary File Read VulnerabilityApache Software Foundation Apache Airflow Drill Provider… +1
- CVE-2023-40254Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, GGenians Genian NAC · Genians Genian ZTNA
- CVE-2023-3823Security issue with external entity loading in XML without enabling itPHP Group PHP
- CVE-2023-34438Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local accessIntel(R) NUC BIOS firmware
- CVE-2022-36372Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege viIntel(R) NUC BIOS firmware
- CVE-2023-22449Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lIntel(R) NUC BIOS firmware
- CVE-2023-34086Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lIntel(R) NUC BIOS firmware
- CVE-2023-32617Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privilegeIntel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Comp…
- CVE-2023-25757Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalatiIntel(R) Unison(TM) software
- CVE-2022-29887Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potentiIntel(R) Manageability Commander software
- CVE-2023-29494Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege Intel(R) NUCs
- CVE-2022-37336Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege vIntel(R) NUC
- CVE-2023-27515Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalatiIntel(R) DSA software
- CVE-2023-28380Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enableIntel(R) AI Hackathon software
- CVE-2023-28714Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allowIntel(R) PROSet/Wireless WiFi software for Windows
- CVE-2023-28385Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially Intel(R) NUC Pro Software Suite for Windows
- CVE-2023-26587Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation oIntel(R) Easy Streaming Wizard software
- CVE-2022-45112Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalIntel(R) VROC software
- CVE-2022-41804Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentiallyIntel(R) Xeon(R) Processors
- CVE-2023-25773Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated userIntel(R) Unite(R) Hub software installer for Windows
- CVE-2022-37343Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of prIntel(R) Processors
- CVE-2022-38102Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may alIntel(R) Converged Security and Management Engine
- CVE-2022-36392Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94,Intel(R) AMT and Intel(R) Standard Manageability in Intel (…
- CVE-2022-40964Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enablIntel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-46329Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation ofIntel(R) PROSet/Wireless WiFi software
- CVE-2022-27635Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enablIntel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2021-28427Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file.
- CVE-2021-28835Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file.
Medium, low and unrated 117
- CVE-2023-0871An XML External Entity injection vulnerabilityThe OpenNMS Group Horizon · The OpenNMS Group Meridian +1
- CVE-2023-32267OpenText / Micro Focus ArcSight Management Center Remote VulnerabilityArcSight Management Center
- CVE-2023-39418Postgresql: merge fails to enforce update or select row security policiesRed Hat Enterprise Linux · Red Hat Software Collections
- CVE-2023-3937Cross site scripting vulnerabilities in Snow License ManagerSnow Software Snow License Manager
- CVE-2023-4108Audit logging fails to sanitize post metadataMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4107Incorrect authorization allows a user manager to update a system adminMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4106A guest user can perform various actions on public playbooksMattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-4105Attachment of deleted message in a thread remains accessible and downloadable Mattermost · github.com/mattermost/mattermost-server/v6
- CVE-2023-40253Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNGenians Genian NAC · Genians Genian ZTNA
- CVE-2023-32663Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable esIntel(R) RealSense(TM) SDKs in
- CVE-2023-32543Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation oIntel(R) ITS sofware
- CVE-2023-32547Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to poteMAVinci Desktop Software for Intel(R) Falcon 8+
- CVE-2023-32609Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially enaIntel Unite(R) android application
- CVE-2023-34349Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local accessIntel(R) NUC BIOS firmware
- CVE-2023-32285Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local accIntel(R) NUC BIOS firmware
- CVE-2023-22330Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure viIntel(R) NUC BIOS firmware
- CVE-2023-22356Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locaIntel(R) NUC BIOS firmware
- CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, IntelIntel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Ex…
- CVE-2023-30760Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticatedIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-33877Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticateIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-33867Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-29243Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledgeIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-34427Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-32656Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an autIntel(R) RealSense(TM) ID software for Intel(R) RealSense(T…
- CVE-2023-29151Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escaIntel(R) PSR SDK
- CVE-2023-31246Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially eIntel(R) SDP Tool software
- CVE-2023-34355Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft WindIntel(R) Server Board M10JNP2SB integrated BMC video drivers
- CVE-2022-44612Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to potentially Intel(R) Unison(TM) software
- CVE-2023-29500Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentiallyIntel(R) NUCs
- CVE-2023-27887Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure viaIntel(R) NUCs
- CVE-2023-28823Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticatIntel(R) oneAPI Toolkit and component software installers
- CVE-2023-27391Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged usIntel(R) oneAPI Toolkit and component software installers
- CVE-2023-28711Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user toHyperscan Library maintained by Intel
- CVE-2022-29470Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to potentially enable escaIntel DTT Software
- CVE-2023-28658Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable Intel(R) oneMKL software
- CVE-2022-25864Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalaIntel(R) oneMKL software
- CVE-2023-27392Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentiallIntel(R) Support android application
- CVE-2023-27509Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enablIntel(R) ISPC software installers
- CVE-2023-27505Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow Intel(R) Advanced Link Analyzer Standard Edition software i…
- CVE-2023-25944Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user toIntel(R) VCUST Tool software
- CVE-2023-28405Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potIntel(R) Distribution of OpenVINO(TM) Toolkit
- CVE-2023-27506Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potIntel(R) Optimization for Tensorflow software · intel-te… +2
- CVE-2023-23908Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable inform3rd Generation Intel(R) Xeon(R) Scalable processors
- CVE-2023-22276Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticatedIntel(R) Ethernet Controllers and Adapters E810 Series
- CVE-2023-22841Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(System Firmware Update Utility (SysFwUpdt) for some Intel(R…
- CVE-2023-23577Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticaITE Tech consumer infrared drivers for Intel(R) NUC
- CVE-2022-40982Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) ProcessoIntel(R) Processors
- CVE-2023-25182Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to pIntel(R) Unite(R) Client software for Mac
- CVE-2023-22840Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentiallIntel(R) oneVPL GPU software
- CVE-2023-22338Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable informatIntel(R) oneVPL GPU software
- CVE-2022-43505Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denIntel(R) Processors
- CVE-2022-27879Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable informationIntel(R) Processors
- CVE-2022-38083Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discIntel(R) Processors
- CVE-2022-44611Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of Intel(R) Processors
- CVE-2022-38973Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- CVE-2022-41984Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and DecembeIntel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…
- CVE-2023-24016Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated usIntel(R) Quartus(R) Prime Pro and Standard edition software…
- CVE-2022-43456Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may alIntel(R) RST software
- CVE-2023-25775Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user toIntel(R) Ethernet Controller RDMA driver for linux
- CVE-2022-29871Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enaIntel(R) CSME software installer
- CVE-2022-38076Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-36351Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentiallIntel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CVE-2022-34657Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enablIntel(R) PCSD BIOS
- CVE-2023-28938Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentialIntel(R) SSD Tools software
- CVE-2023-28736Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalatioIntel(R) SSD Tools software
- CVE-2023-37512HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcherHCL Software HCL Traveler Companion
- CVE-2023-37513HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcherHCL Software HCL Traveler To Do
- CVE-2023-37511HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web contentHCL Software HCL Traveler To Do
- CVE-2023-4304Business Logic Errors in froxlor/froxlorfroxlor/froxlor
- CVE-2020-19952Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, al
- CVE-2020-20523Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary codegilacms/gila
- CVE-2020-23595Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive inf
- CVE-2020-24075Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to
- CVE-2020-24187An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Poin
- CVE-2020-24221An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via c
- CVE-2020-24222Buffer Overflow vulnerability in jfif_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitra
- CVE-2020-24804Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs.
- CVE-2020-24872Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitra
- CVE-2020-24904An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted
- CVE-2020-24922Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execucom.xuxueli:xxl-job
- CVE-2020-24950SQL Injection vulnerability in file Base_module_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbi
- CVE-2020-25915Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crathinkcmf/thinkcmf
- CVE-2020-27449Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote atta
- CVE-2020-27514Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to del
- CVE-2020-27544An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote a
- CVE-2020-28717Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execut
- CVE-2020-28840Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause
- CVE-2020-28848CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file.
- CVE-2020-28849Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive inf
- CVE-2020-35139An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of servicryu
- CVE-2020-35141An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of ryu
- CVE-2020-35990Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, a
- CVE-2020-36023An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf
- CVE-2020-36024An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf
- CVE-2020-36034SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, esc
- CVE-2020-36037An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor
- CVE-2020-36082File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft
- CVE-2020-36136SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_
- CVE-2020-36138An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (Do
- CVE-2021-25786An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder
- CVE-2021-25856An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php.
- CVE-2021-25857An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type para
- CVE-2021-26504Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information vi
- CVE-2021-26505Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.exthellojs
- CVE-2021-27523An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information vi
- CVE-2021-27524Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embbraft-editor
- CVE-2021-28025Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a deni
- CVE-2021-28411An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows
- CVE-2021-28429Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a
- CVE-2021-29057An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service.node-worker-threads-pool
- CVE-2021-29378SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request
- CVE-2021-3236vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method
- CVE-2023-22955An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-22956An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-22957An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000.
- CVE-2023-40260EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and p
- CVE-2023-40267GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.gitpython