Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to acc…
In ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no …
In ims service, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with …
In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System e…
Gitea
HIGH 7.1
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.
Nextcloud Server
MEDIUM 5.3
Nextcloud server is a self hosted system designed to provide cloud style services. In affected versions the User Status API did not consider the user…
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
Download Manager
HIGH 7.5
The Download Manager WordPress plugin before 3.2.35 does not have any authorisation checks in some of the REST API endpoints, allowing unauthenticate…
Smart Forms
MEDIUM 6.5
The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authentic…
Linux Kernel
HIGH 8.8
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control bl…
Linux Kernel
HIGH 7.8
A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circum…
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3.4.5, authenticated users cou…
Use Any Font
MEDIUM 6.1
The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthen…
Wp Google Map
MEDIUM 5.7
The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which co…
Visitor Statistics
MEDIUM 5.4
The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.5 does not have authorisation and CSRF checks in the updateIpAddress AJAX act…
In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address.
Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.
Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` servi…
Redis
CRITICAL 10.0
It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which c…
Fedora
HIGH 8.8
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would all…
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
Dbcharts
HIGH 8.8
A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified databa…
Chef Sinatra
HIGH 8.8
A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP…
Swamp
HIGH 8.8
A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to connect to an attacker-specifie…
Snow Commander
MEDIUM 6.5
Missing permission checks in Jenkins Snow Commander Plugin 1.10 and earlier allow attackers with Overall/Read permission to connect to an attacker-sp…
Scp Publisher
HIGH 8.8
A missing permission check in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-sp…
Checkmarx
MEDIUM 6.5
Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an attacker-spe…
Missing Authorization in Packagist librenms/librenms prior to 22.2.0.
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via …