2023

There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attack

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul

A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to instal

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryp

IBM Spectrum Scale 5.1.5.0 through 5.1.5.1 uses weaker than expected cryptographic algorithms that could allow an attack

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /adm

Azure DevOps Server Spoofing Vulnerability

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o

Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before vers

A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.

Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cub

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip

Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windo

Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate priv

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows bef

ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows bef

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber.

Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that

CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and pri

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a p

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain

IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected b

A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affec

Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTR

The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino

An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to di

An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write adminis

An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administr

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-

A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0

GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the sa

A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Guest e-Book 1.0. This affects

A vulnerability classified as problematic has been found in PHPGurukul Teacher Subject Allocation Management System 1.0.

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical.

Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permis

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier does not mask PaaSLane authentication tokens displayed on the job con

Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier stores PaaSLane authentication tokens unencrypted in job config.xml f

A cross-site request forgery (CSRF) vulnerability in Jenkins Deployment Dashboard Plugin 1.0.10 and earlier allows attac

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier does not mask access tokens displayed on the job configuration form,

Jenkins Dingding JSON Pusher Plugin 2.0 and earlier stores access tokens unencrypted in job config.xml files on the Jenk

Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is le

Jenkins OpenId Connect Authentication Plugin 2.6 and earlier stores a password of a local user account used as an anti-l

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permi

Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permi

A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read

A vulnerability, which was classified as critical, was found in Thecosy IceCMS 2.0.1. Affected is an unknown function of