2023

A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier

Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an H

Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks

Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log f

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Art

Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Art

A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62. This issue affects some unknown p

A vulnerability classified as critical was found in OTCMS up to 6.62. This vulnerability affects unknown code. The manip

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issu

Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issu

An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Win

A vulnerability classified as critical has been found in mccms up to 2.6.5. This affects the function pic_save of the fi

A vulnerability was found in mccms up to 2.6.5. It has been rated as critical. Affected by this issue is the function pi

A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been declared as problematic. Affected by this vulnera

A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been classified as critical. Affected is the function

A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown pr

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.

Windows CryptoAPI Denial of Service Vulnerability

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the m

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the m

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the m

The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the m

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Visual Studio Code Spoofing Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft OneNote Spoofing Vulnerability

Visual Studio Information Disclosure Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Denial of Service Vulnerability

.NET and Visual Studio Elevation of Privilege Vulnerability

Windows DNS Spoofing Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows Installer Information Disclosure Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Remote Procedure Call Runtime Denial of Service Vulnerability

DHCP Server Service Information Disclosure Vulnerability

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

Windows Remote Desktop Security Feature Bypass Vulnerability

Windows CryptoAPI Denial of Service Vulnerability

Azure DevOps Server Spoofing Vulnerability

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 o

Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0

A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected web

The underlying feedback mechanism of Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk

Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password prote

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.

Buffer copy without checking size of input in Zoom Meeting SDK before 5.13.0 may allow an authenticated user to potent