CVE-2023-38154

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-36907

Windows Cryptographic Services Information Disclosure Vulnerability...

CVE-2023-36894

Microsoft SharePoint Server Information Disclosure Vulnerability...

CVE-2023-35382

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-35386

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-35389

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability...

CVE-2023-35376

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

CVE-2023-35380

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-29328

Microsoft Teams Remote Code Execution Vulnerability...

UBUNTU-CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability...

UBUNTU-CVE-2023-38178

.NET Core and Visual Studio Denial of Service Vulnerability...

CVE-2023-38044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23757

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

Denial Of Service (DoS)

vim is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-range-pointer offset in the library, allowing an attacker to cause an application crash...

Cross-Site Scripting (XSS)

github.com/answerdev/answer is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end via the Question Tag, which allows an attacker to inject and execute malicious javascript on victim's browser...

Race Condition

github.com/answerdev/answer is vulnerable to Race Condition. The vulnerability exists in the library's upVote and downVote functions, which allow an attacker to increase and decrease votes through a race condition...

CVE-2023-21411

User provided input is not sanitized in the “Settings Access Control” configuration interface allowing for arbitrary code execution...

CVE-2022-42182

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...

Omnis Studio 安全漏洞

Omnis Studio is a rapid application development tool from Omnis. A security vulnerability exists in Omnis Studio version 10.22.00 that stems from a locked class in the Omnis library that unlocks and modifies the browser via Omnis Studio...

The vulnerability of the library for working with the DICOM format allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...