2023

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Access Control vulnerability. An attack

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Adobe Experience Manager versions 6.5.18 and earlier are affected by a Cross-site Scripting (DOM-based XSS) vulnerabilit

Adobe Experience Manager versions 6.5.18 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be pe

Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely ava

Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum featu

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special f

Kaifa Technology WebITR is an online attendance system. A remote attacker with regular user privilege can obtain partial

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail de

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter withi

SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific a

Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active

Business Logic Errors in GitHub repository microweber/microweber prior to 2.0.

lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of i

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP G

A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to t

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or ma

Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or

Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or m

Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manip

Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or m

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1,

Speckle Server provides server, frontend, 3D viewer, and other JavaScript utilities for the Speckle 3D data platform. A

Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andreas Münch Mult

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labs64 Credit Trac

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simple Calendar Si

A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious act

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpexpertsio Rocket