2023

views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..

link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources ou

iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences relate

iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain escape sequences relate

Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to

Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Qwerty23 Rocket Font plugin <= 1.2.3 versions.

The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_cla

The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due

The EventON plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in versions up

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Aff

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a cra

Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue

The Soisy Pagamento Rateale plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabilit

I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter.

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command l

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwor

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory writ

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allo

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allo

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buff

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of boun

stb_image is a single file MIT licensed library for processing images. If `stbi__load_gif_main` in `stbi_load_gif_from_

stb_image is a single file MIT licensed library for processing images. It may look like `stbi__load_gif_main` doesn’t g

stb_image is a single file MIT licensed library for processing images. A crafted image file can trigger `stbi__load_gif_

stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number

stb_image is a single file MIT licensed library for processing images. When `stbi_set_flip_vertically_on_load` is set to

stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds me

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra

An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrar

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This

Sitolog sitologapplicationconnect v7.8.a and before was discovered to contain a SQL injection vulnerability via the comp

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform sc

pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `