2023

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can cha

The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its set

The All-in-one Floating Contact Form WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, wh

The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a

Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate ope

An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated at

An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswe

A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown

A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function o

A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affect

A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affec

A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown cod

A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some u

A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kerne

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affec

A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to

Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or director

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Fi

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability h

KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 lea

ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wor

Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerabili

There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A sensitive information leak issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.

A vulnerability was found in Hospital Management System 1.0. It has been rated as critical. This issue affects some unkn

A vulnerability was found in Hospital Management System 1.0. It has been declared as critical. This vulnerability affect

A vulnerability was found in Hospital Management System 1.0. It has been classified as critical. This affects an unknown

There is a Cross-site Scripting vulnerability in Esri Portal for ArcGIS Sites in versions 10.9 and below that may allow

A vulnerability was found in Hospital Management System 1.0 and classified as critical. Affected by this issue is some u

A vulnerability has been found in Campcodes Beauty Salon Management System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as critical, was found in SourceCodester House Rental and Property Listing System

A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. T

Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthentica

Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker

A vulnerability was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. It has been rated as proble

A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. Affected by this vulnerability is the func

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the

A vulnerability has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0 and classified as criti

A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention

eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/re