2023

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when gen

The Media Library Assistant WordPress plugin before 3.06 does not properly sanitise and escape a parameter before using

The GeoDirectory WordPress plugin before 2.2.24 does not properly sanitise and escape a parameter before using it in a S

The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address o

A missing permissions check in Mattermost Playbooks in Mattermost allows an attacker to modify a playbook via the /plugi

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by

In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL poin

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mechan

A vulnerability classified as critical has been found in SourceCodester Doctors Appointment System 1.0. This affects an

An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 thr

An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. D

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.

In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __l

In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Dra

A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by th

A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as criti

Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName

All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP req

In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NT

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9.

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and An

Cross-Site Request Forgery (CSRF) in GitHub repository froxlor/froxlor prior to 2.0.11.

Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leadin

LiteDB is a small, fast and lightweight .NET NoSQL embedded database. Versions prior to 5.0.13 are subject to Deserializ

File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on /

SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive informatio

Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges via

In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obt

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This iss

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by t

All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-c

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker coul

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8

Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysC

Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can mod

Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly

The 'rx_export_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerabili

Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit_or

A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in some cases did does not cl

A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to