2023

SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges

JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that s

Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a

An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attack

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

Missing Authorization in GitHub repository hamza417/inure prior to Build95.

Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability al

KernelSU is a Kernel based root solution for Android. Starting in version 0.6.1 and prior to version 0.7.0, if a KernelS

JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications. Pr

NATS.io is a high performance open source pub-sub distributed communication technology, built for the cloud, on-premise,

An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery atta

An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerabilit

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, there is a reflected cross-site script

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` end

CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable t

BigBlueButton is an open-source virtual classroom. Prior to versions 2.6.11 and 2.7.0-beta.3, Guest Lobby was vulnerable

An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveW

Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code vi

A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote

A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial

baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in

tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign)

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability

baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the

baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in th

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.1 has a path traversal vuln

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestri

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior

tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input da

The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalati

In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to lo

In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead

In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to

In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to loc

In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to

In Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to remote information disc

In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a

In Settings, there is a possible way for the user to change SIM due to a missing permission check. This could lead to lo

In Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of

In Messaging, there is a possible way to disable the messaging application due to improper input validation. This could

In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. This could lead to l

In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. This could lead

In Settings, there is a possible restriction bypass due to a missing permission check. This could lead to local escalati