2023

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function

A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm

A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loa

Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 param

Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.

ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).

ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library.

ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS).

IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF).

Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName pa

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Af

An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Conten

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to ob

An issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability affects the setup panel

An issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to execute code via system(

Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted s

Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS

Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP

An issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin/filewrite, an attacker c

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticat

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BI

Sielco PolyEco1000 is vulnerable to an authentication bypass vulnerability due to an attacker modifying

Sielco PolyEco1000 is vulnerable to an improper access control vulnerability when the application provides

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protecte

An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the ter

A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrar

An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue

Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote passw

Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcem

Sielco PolyEco1000 is vulnerable to an attacker escalating their privileges by modifying passwords in POST requests.

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of

In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsi

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lac

Sielco PolyEco1000 is vulnerable to a session hijack vulnerability due to the cookie being vulnerable to a brute force

Secret token configuration is never applied when using ECK <2.8 with APM Server >=8.0. This could lead to anonymous requ

A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unk

A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability

A vulnerability was found in PHPGurukul Online Railway Catering System 1.0. It has been classified as critical. Affected

A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCr

Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view_servic

A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause

An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user

Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found

A vulnerability has been found in SourceCodester Sticky Notes App 1.0 and classified as critical. This vulnerability aff

A vulnerability, which was classified as problematic, was found in SourceCodester Sticky Notes App 1.0. This affects an

A vulnerability classified as critical was found in SourceCodester File Manager App 1.0. Affected by this vulnerability

A vulnerability classified as problematic has been found in Dragon Path 707GR1 up to 20231022. Affected is an unknown fu

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow a