2023

matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances that

JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to exec

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH s

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 (starting at l

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.

Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which co

JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API wi

JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-fo

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who ar

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticate

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to c

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow a

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenti

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could al

A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticat

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injec

A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated

A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software

A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a reposit

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers coul

A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Ser

A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS X

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, c

A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote a

A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Soft

Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated,

A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauth

Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticate

BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Te

BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Te

Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerab

A vulnerability, which was classified as critical, has been found in HimitZH HOJ up to 4.6-9a65e3f. This issue affects s

A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the

A vulnerability classified as critical has been found in ForU CMS. This affects an unknown part of the file /install/ind

A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.

Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Aut

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence

During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed fr

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer

In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly u

A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to

In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memo

A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds writ

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write

The Options for Twenty Seventeen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social-links' sh