2023

Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB).

Nextcloud/Cloud is a calendar app for Nextcloud. An attacker can gain access to stacktrace and internal paths of the ser

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the

Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB).

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability identified in BigFix Server version 9.5.12.68, allowing

A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by this

A vulnerability has been found in PHPGurukul Online Notes Sharing System 1.0 and classified as problematic. Affected by

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This XSS vulnerability is in the Download Status Report

ONTAP Mediator versions prior to 1.7 are susceptible to a vulnerability that can allow an unauthenticated attacker to e

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed a bypass of Private Mod

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exp

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being tran

An insertion of sensitive information into the log file in the audit log in GitHub Enterprise Server was identified that

An insertion of sensitive information into log file vulnerability was identified in the log files for a GitHub Enterpris

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositori

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be re

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be up

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'pass

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' pa

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' para

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' param

A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploi

An insufficient entropy vulnerability was identified in GitHub Enterprise Server (GHES) that allowed an attacker to brut

Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the man

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when build

An Observable Timing Discrepancy, Covert Timing Channel vulnerability in Silabs GSDK on ARM potentially allows Padding O

A null pointer dereference vulnerability was found in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() in drivers/net/wireless/

A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by

A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerab

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execu

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

A vulnerability classified as critical has been found in Byzoro S210 up to 20231210. Affected is an unknown function of

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in August Infotech Wo

Authorization Bypass Through User-Controlled Key vulnerability in Blaz K. Rate my Post – WP Rating System.This issue aff

Authorization Bypass Through User-Controlled Key vulnerability in KaineLabs Youzify – BuddyPress Community, User Profile

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsick

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearn

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce Shipping Multiple Addresses.This issue aff

Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Bookings.This issue affects Wo

A vulnerability was found in automad up to 1.10.9. It has been rated as problematic. This issue affects some unknown pro

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExtendThemes Colib

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mondula GmbH Multi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY –