2023

IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially craf

A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue i

A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown

A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the c

A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown pro

A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative

A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affe

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affect

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affecte

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters. This affects 0.6.26.

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a u

Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar secti

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault Manageme

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to c

An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain se

Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a

Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

Microsoft Edge for iOS Spoofing Vulnerability

An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon (l2cpd) of

An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon (PPMD) of Juniper Networ

A Reachable Assertion vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved a

A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and J

An Incomplete Internal State Distinction vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos O

Dynamics 365 Finance Spoofing Vulnerability

An Out-of-bounds Read vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series all

A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36

Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows.

The "nickname" field within Savoir-faire Linux's Jami application is susceptible to a failed state when a user inserts s

Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries w

Cross-site Scripting (XSS) - DOM in GitHub repository plaidweb/webmention.js prior to 0.5.5.

iSCSI dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file

Kafka dissector crash in Wireshark 4.0.0 to 4.0.6 and 3.6.0 to 3.6.14 allows denial of service via packet injection or c

The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Scripting in versions

libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebit

libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. Thi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an

JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute ar

A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of

Feedbacksystem is a personalized feedback system for students using artificial intelligence. Passwords of users using LD

Discourse is an open source discussion platform. A CSP (Content Security Policy) nonce reuse vulnerability could allow X

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syn

Alaris Systems Manager does not perform input validation during the Device Import Function.

A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read

The configuration from the PCU can be modified without authentication using physical connection to the PCU.

Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zeman