2023

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Busines

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML In

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorr

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Inform

In multiple functions of multiple files, there is a possible way to make the device unusable due to improper input valid

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead

In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypa

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of ser

In multiple functions of JobStore.java, there is a possible way to cause a crash on startup due to improper input valida

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This

In canStartSystemGesture of RecentsAnimationDeviceState.java, there is a possible partial lockscreen bypass due to a rac

An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arb

Cross-site scripting (XSS) vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to injec

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur

snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur

Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.

Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Videos plugin <= 2.6.1 versions.

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this is

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnera

A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an un

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in IKSWEB WordPress Старт plugin <= 3.7 versions.

Cross-Site Request Forgery (CSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform plugin <= 2.

Cross-Site Request Forgery (CSRF) vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) plugin <= 1.0.6 versions

Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions.

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the

Cross-site scripting (XSS) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4

Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Li

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that r

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 stores user credentials in plain clear text which can be read by

IBM PowerVM Hypervisor FW950.00 through FW950.71, FW1010.00 through FW1010.40, FW1020.00 through FW1020.20, and FW1030.0

IBM Security Guardium 11.3, 11.4, and 11.5 could allow a local user to obtain elevated privileges due to incorrect autho

Grav is a flat-file content management system. In versions 1.7.42 and prior, the "/forgot_password" page has a self-refl

An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (

A stored cross-site scripting vulnerability in the Sources UI in Proofpoint Threat Response/ Threat Response Auto Pull (

Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function.

ink! is an embedded domain specific language to write smart contracts in Rust for blockchains built on the Substrate fra

SoftExpert Excellence Suite 2.1.9 is vulnerable to Cross Site Scripting (XSS) via query screens.

loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.

Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows unti

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter.

Cross Site Scripting (XSS) vulnerability in SOGo Web Mail before 4.3.1 allows attackers to obtain user sensitive informa

A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with O