2023

SQL Injection in GitHub repository librenms/librenms prior to 23.10.0.

Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerabil

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it u

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validati

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive informatio

A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attacke

NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emo

A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as cr

A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game s

urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redi

IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3.

A vulnerability was found in SourceCodester Online Motorcycle Rental System 1.0. It has been declared as problematic. Th

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a r

An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri

IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly

IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 1

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21

IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attack

IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled reso

IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker cou

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d

A vulnerability, which was classified as problematic, has been found in ZZZCMS 2.2.0. This issue affects some unknown pr

A vulnerability classified as problematic was found in SourceCodester Medicine Tracker System 1.0. This vulnerability af

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unkno

The Hotjar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the hotjar_site_id in versions up to, a

A vulnerability was found in Portábilis i-Educar up to 2.7.5. It has been declared as problematic. Affected by this vuln

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve s

Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with lim

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specifi

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.

An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to o

All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt(

Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version

Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64

In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute a

Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was

Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows.

Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver

Microsoft Edge (Chromium-based) Spoofing Vulnerability

A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability co