2023

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the R

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X

SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked

SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRN

The Runtime Workbench (RWB) of SAP NetWeaver Process Integration - version SAP_XITOOL 7.50, does not perform authenticat

The Message Display Tool (MDT) of SAP NetWeaver Process Integration - version SAP_XIAF 7.50, does not perform authentica

When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 1

The SAP BW BICS communication layer in SAP Business Warehouse and SAP BW/4HANA - version SAP_BW 730, SAP_BW 731, SAP_BW

In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the C

SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERCORE 7.50, J2EE-APPS 7.50, allows an unauthenticated attacker

A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary

A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attack

A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary

A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown proce

A security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Found

A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resour

A security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submi

Users with only access to launch VDA applications can launch an unauthorized desktop

A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Exec

A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part o

Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site script

Arbitrary file read in Citrix ADC and Citrix Gateway 

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious loca

A vulnerability was found in PHPGurukul Online Shopping Portal 1.0. It has been declared as critical. Affected by this v

​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which c

A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by t

Cross Site Scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows att

Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code v

Cross-Site Scripting (XSS) vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allo

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This fl

A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58.

HCL Launch could disclose sensitive information if a manual edit of a configuration file has been performed.

A vulnerability was found in Dynacase Webdesk and classified as critical. Affected by this issue is the function freedom

Cross Site Scripting vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a c

Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some un

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functi

Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

The Float menu WordPress plugin before 5.0.3 does not sanitise and escape some of its settings, which could allow high p

The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users suc

The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks,

The URL Shortify WordPress plugin before 1.7.0 does not sanitise and escape some of its settings, which could allow high

The Export All URLs WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting them back in

Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions.

KodExplorer 4.51 contains a Cross-Site Scripting (XSS) vulnerability in the Description box of the Light App creation fe

Sourcecodester Online Pizza Ordering System v1.0 has a Cross-site scripting (XSS) vulnerability in "/admin/index.php?pag