3354 matches found
CVE-2023-23757
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
Denial Of Service (DoS)
vim is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out-range-pointer offset in the library, allowing an attacker to cause an application crash...
Cross-Site Scripting (XSS)
github.com/answerdev/answer is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end via the Question Tag, which allows an attacker to inject and execute malicious javascript on victim's browser...
Race Condition
github.com/answerdev/answer is vulnerable to Race Condition. The vulnerability exists in the library's upVote and downVote functions, which allow an attacker to increase and decrease votes through a race condition...
CVE-2023-21411
User provided input is not sanitized in the “Settings Access Control” configuration interface allowing for arbitrary code execution...
CVE-2022-42182
Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Directory Traversal...
Omnis Studio 安全漏洞
Omnis Studio is a rapid application development tool from Omnis. A security vulnerability exists in Omnis Studio version 10.22.00 that stems from a locked class in the Omnis library that unlocks and modifies the browser via Omnis Studio...
The vulnerability of the library for working with the DICOM format allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...
CVE-2023-36888
Microsoft Edge for Android Chromium-based Tampering Vulnerability...
CVE-2023-24896
Dynamics 365 Finance Spoofing Vulnerability...
CVE-2023-36884
Windows Search Remote Code Execution Vulnerability...
CVE-2023-36872
VP9 Video Extensions Information Disclosure Vulnerability...
CVE-2023-36867
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability...
CVE-2023-35356
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-35360
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-35337
Win32k Elevation of Privilege Vulnerability...
CVE-2023-35330
Windows Extended Negotiation Denial of Service Vulnerability...
CVE-2023-35336
Windows MSHTML Platform Security Feature Bypass Vulnerability...