2023

A vulnerability was found in OpenRapid RapidCMS 1.3.1 and classified as critical. This issue affects some unknown proces

A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. This vulnerability affects unknow

A vulnerability, which was classified as critical, was found in OpenRapid RapidCMS 1.3.1. This affects an unknown part o

A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue i

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1

A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practi

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been rated a

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declare

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classif

A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected

A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. Thi

An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.40

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

Improper Input Validation in GitHub repository hamza417/inure prior to build88.

Missing Authorization in GitHub repository hamza417/inure prior to build88.

Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files an

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html

Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with co

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3.

A Cross-Site Scripting (XSS) vulnerability in CSZ CMS 1.3.0 allows attackers to execute arbitrary code via a crafted pay

CSZ CMS 1.3.0 is vulnerable to cross-site scripting (XSS), which allows attackers to execute arbitrary web scripts or HT

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect a

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Aff

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.

A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects t

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Julien Crego Manager for Icomoon plugin <= 2.0 v

An issue was discovered in phpList before 3.6.14. Due to an access error, it was possible to manipulate and edit data of

A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerabil

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Theme Palace TP Education plugin <= 4.4 versions

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Artiss Plugins List plugin <= 2.5 versions.

A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue i

A vulnerability classified as critical was found in Codecanyon Credit Lite 1.5.4. Affected by this vulnerability is an u

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versio

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to

Zoho ManageEngine ADManager Plus version 7182 and prior disclosed the default passwords for the account restoration of u

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Marco Steinbrecher WP BrowserUpdate plugin <= 4.5 vers

Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized ac

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal

Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to cre

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla

In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FIL

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthe