2023

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links

Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted pa

A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute

Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is imprope

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows atta

GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at b

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code v

Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local at

A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attack

There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widge

There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support S

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer W

PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php.

There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing S

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may

Cross-site Scripting (XSS) - Stored in GitHub repository omeka/omeka-s prior to 4.0.4.

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to o

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to e

IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. I

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec

A vulnerability, which was classified as critical, has been found in Bettershop LaikeTui. Affected by this issue is some

A vulnerability classified as critical was found in SourceCodester Inventory Management System 1.0. Affected by this vul

A vulnerability classified as critical has been found in SourceCodester Inventory Management System 1.0. Affected is an

IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could

IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a speciall

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to emb

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav

A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. Affected by th

A vulnerability classified as critical has been found in SPA-Cart eCommerce CMS 1.9.0.3. This affects an unknown part of

A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is an unknown function of the f

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. Thi

A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. This vulnerability affects unknown code of

A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unkn

A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenti

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an a

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an au

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an au

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issu

Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impac

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read over

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read ov

An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet cont

An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID

An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol

Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used

Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 throug

OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. Some end users of Op

Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read ov