2023

TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel pa

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ paramet

TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ p

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter

TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of th

Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical

Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potent

The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing appl

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python

Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi)

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior t

Cacti is an open source operational monitoring and fault management framework. A reflection cross-site scripting vulnera

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior t

Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in ver

Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to

ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports i

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the i

A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees be

IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because applicatio

IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validat

Wasmer is a WebAssembly runtime that enables containers to run anywhere: from Desktop to the Cloud, Edge and even the br

Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-li

A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affect

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problema

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial o

A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3

A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.2

A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the bu

A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affe

A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Aff

Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shar

FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.

A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vul

A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an u

make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandl

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue af

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulne

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated

MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG an

An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In i

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This aff

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'JobId' parameter of the Em

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the