CVE

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Visual Studio Elevation of Privilege Vulnerability

A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, make requests on behalf of the user, and obtain user credentials.

Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1.

DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.

Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1.

Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP class, to execute exported functions from libraries.  There is a routine that restricts it to execute specific functions from two dynamic link library files.  By using a CIP class, an attacker can upload a self-made library to the device which allows the attacker to bypass the security check and execute any code written in the function.

OpenCart v4.0.2.2 is vulnerable to Brute Force Attack.