CVE Records

Use of Out-of-range Pointer Offset in Graphics

Use After Free in DSP Services

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Google Skia Integer Overflow Vulnerability

ownCloud Improper Authentication Vulnerability

ownCloud graphapi Information Disclosure Vulnerability

Qlik Sense HTTP Tunneling Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

SysAid Server Path Traversal Vulnerability

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

BIG-IP Configuration utility authenticated SQL injection vulnerability

BIG-IP Configuration utility unauthenticated remote code execution vulnerability

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

VMware vCenter Server Out-of-Bounds Write Vulnerability

Cisco IOS XE Web UI Command Injection Vulnerability

Stored XSS vulnerability in Roundcube

North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

Cisco IOS XE Web UI Privilege Escalation Vulnerability

Microsoft WordPad Information Disclosure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Skype for Business Elevation of Privilege Vulnerability

Unauthenticated sensitive information disclosure

HTTP/2 Rapid Reset Attack Vulnerability

Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

Glibc: buffer overflow in ld.so leading to privilege escalation

Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

Apple Multiple Products WebKit Code Execution Vulnerability

Apple Multiple Products Kernel Privilege Escalation Vulnerability

Apple Multiple Products Improper Certificate Validation Vulnerability

JetBrains TeamCity Authentication Bypass Vulnerability

Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

[Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

Microsoft Word Information Disclosure Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Apple Multiple Products Code Execution Vulnerability

Android Framework Privilege Escalation Vulnerability

ASUS RT-AX55 Routers OS Command Injection Vulnerability

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

Google Chromium V8 Type Confusion Vulnerability

KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability

Qlik Sense Path Traversal Vulnerability

Qlik Sense HTTP Tunneling Vulnerability

RARLAB WinRAR Code Execution Vulnerability

Ivanti Sentry Authentication Bypass Vulnerability

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

Apple Multiple Products Unspecified Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

ZKTeco BioTime Path Traversal Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Apple Multiple Products Kernel Unspecified Vulnerability

Apple Multiple Products WebKit Code Execution Vulnerability

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

Adobe ColdFusion Improper Access Control Security feature bypass

Windows Search Remote Code Execution Vulnerability

Microsoft Outlook Security Feature Bypass Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows MSHTML Platform Elevation of Privilege Vulnerability

Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Android Pixel Information Disclosure Vulnerability

Apple Multiple Products WebKit Type Confusion Vulnerability

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple Multiple Products Integer Overflow Vulnerability

Apple Multiple Products WebKit Sandbox Escape Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

Zyxel Multiple NAS Devices Command Injection Vulnerability

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

VMware Tools Authentication Bypass Vulnerability

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Vmware Aria Operations for Networks Command Injection Vulnerability

TP-Link Multiple Routers Command Injection Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Progress MOVEit Transfer SQL Injection Vulnerability