2023

The firmware update package for the wireless card is not properly signed and can be modified.

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts o

Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts o

A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scr

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary w

An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration f

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary w

Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the componen

A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitra

Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP

A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. Affect

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. T

Duktape is an 3rd-party embeddable JavaScript engine, with a focus on portability and compact footprint. When adding too

Reflected XSS attacks, occur when a malicious script is reflected off a web application to the victim's browser. The scr

URL validation scheme receives input from a user and then parses it to identify its various components. The validation s

Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off a web applic

Stored or persistent cross-site scripting (XSS) is a type of XSS where the attacker first sends the payload to the web a

Currently, geomap configuration (Administration -> General -> Geographical maps) allows using HTML in the field “Attrib

Specially crafted string can cause a buffer overrun in the JSON parser library leading to a crash of the Zabbix Server o

JavaScript preprocessing, webhooks and global scripts can cause uncontrolled CPU, memory, and disk I/O utilization. Prep

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iDisplay PlatPlay

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.3 before 15.11.10, all versions sta

An information disclosure issue in GitLab CE/EE affecting all versions from 16.0 prior to 16.0.6, and version 16.1.0 all

ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthoriz

Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary fil

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authentic

Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unaut

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 prior to 15.11.10, all versions f

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions sta

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14 before 15.11.10, all versions sta

Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthentic

Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote un

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.10 before 15.11.10, all versions st

Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the unde

In notification access permission dialog box, malicious application can embedded a very long service label that overflow

In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to lo

In multiple functions of io_uring.c, there is a possible kernel memory corruption due to improper locking. This could l

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a p

In validateForCommonR1andR2 of PasspointConfiguration.java, there is a possible way to inflate the size of a config file

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of s

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused d

In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could

In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy

The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to deni

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. Th

A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issu

A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability i