Archive
23 January 2024
Vulnerabilities first published on this day (UTC), newest first.
59 results · Clear filters · Feed
-
High 7.5
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to…
-
High 8.8
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit he…
-
High 8.8
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to inst…
-
High 8.8
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit he…
-
High 8.8
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to pote…
-
High 7.1CVE-2023-47115 Scanner template
Label Studio XSS Vulnerability on Avatar Upload
Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML …
-
High 7.8
A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload …
-
High 7.8
An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Wor…
-
High 7.1
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attack…
-
High 7.5
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to exec…
-
High 8.8
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary…
-
High 7.8
An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the upd…
-
High 7.4
An exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local attacker to escalate …
-
High 7.8
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileg…
-
High 7.8
An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate pr…
-
High 7.8
A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileg…
-
High 7.8
A local file inclusion vulnerability on the Trend Micro Apex One management server could allow a local attacker to esca…
-
High 7.8
A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attack…
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate …
-
High 7.8
An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privile…
-
High 8.4
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300
There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access.
-
High 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer
A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's …
-
High 7.5
HPE OneView may allow clusterService Authentication Bypass resulting in denial of service.
-
High 7.8
HPE OneView may allow command injection with local privilege escalation.
-
High 8.8
The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially e…
-
High 7.5
An unchecked return value in TLS handshake code could have caused a potentially exploitable crash. This vulnerability a…
-
High 7.5
In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploi…
-
High 8.8
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence…
-
High 8.8
A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, F…
-
High 8.8
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into grantin…
-
High 8.8
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series ve…
-
High 8.1
Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series vers…
-
High 8.8
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series ve…
-
High 7.4
Hitron Systems DVR LGUVR-16H Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR LGUVR-16H 1.02~4.02 allows an attacker to cause network attack in case of using defalut admin ID/PW.