2023

In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This co

there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with

IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver cod

A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypa

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Bus

A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privilege

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager,

A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and

Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web

Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.

A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information v

Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44

The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40.

The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capabil

The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includi

Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG26

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG26

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP,

This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to m

pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an inf

Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via

Cross Site Request Forgery (CSRF) vulnerability was discovered in CatfishCMS 4.8.63 that would allow attackers to obtain

An issue was discovered in espcms version P8.18101601. There is a cross site scripting (XSS) vulnerability that allows a

Meldekarten generator is an open source project to create a program, running locally in the browser without the need for

IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to

An cross site request forgery (CSRF) vulnerability discovered in Jymusic v2.0.0.,that allows attackers to execute arbitr

Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows a

A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allow

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insuffic

IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to securit

A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain priv

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot

A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remot

Apereo CAS is an open source multilingual single sign-on solution for the web. Apereo CAS can be configured to use authe

IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr

IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validatio

IBM QRadar SIEM 7.5.0 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific doma

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution

Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SE

i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter

Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target f

Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it wa

Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configura

IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9.

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an an