2023

Mattermost Desktop fails to set an appropriate log level during initial run after fresh installation resulting in loggin

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Castos Seriously Simple Stats plugin <= 1.5.1 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Mana

Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplica

Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP

Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87,

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in David Lingren Media Library Assistant plugin <= 3.11

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny

Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through

On affected Wago products an remote attacker with administrative privileges can access files to which he has already acc

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects Apa

Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.

In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `

In the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL

Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS) vulnerability. A remote

Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability. An authen

SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticat

Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHu

Path Traversal in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated us

Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate

IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could d

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a det

IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IB

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information through an HTTP request that could

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by

IBM Security Verify Privilege On-Premises 11.5 could disclose sensitive information to an attacked due to the transmiss

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly vali

IBM Security Verify Privilege On-Premises 11.5 could allow a remote authenticated attacker to execute arbitrary command

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a speciall

IBM Security Verify Privilege On-Premise 11.5 could allow an authenticated user to obtain sensitive information or perf

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain sensitive information due to insufficient s

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to modify messages returned from the server due

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by

Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability t

Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained acc

Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it po

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially cr

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation

A vulnerability classified as problematic has been found in Halulu simple-download-button-shortcode Plugin 1.0 on WordPr

A vulnerability was found in reciply Plugin up to 1.1.7 on WordPress. It has been rated as critical. This issue affects

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with

OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 202

An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted s

Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticate

MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user c