2023

A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of th

A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. Affected by this

A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability

Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This

Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path va

parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can

PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cr

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects suppl

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was fo

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was fo

There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw all

NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. A new Connector architectu

Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. T

Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when

Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS S

GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or cra

NetScaler file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted ca

Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture fi

BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file

An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patt

A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for reso

An issue was discovered in Papaya Viewer 1.0.1449. User-supplied input in form of DICOM or NIFTI images can be loaded in

Craft is a CMS for creating custom digital experiences on the web. Cross-site scripting (XSS) can be triggered via the U

Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination s

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_

NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. A remote attacker can i

A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the a

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authent

A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be ena

A stored cross-site scripting (XSS) vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execut

A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including

A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.

In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful

mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty.

skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JS

Cross-Site Request Forgery (CSRF) vulnerability in Made with Fuel Better Notifications for WP plugin <= 1.9.2 versions.

Cross-Site Request Forgery (CSRF) vulnerability in Daniel Mores, A. Huizinga Resize at Upload Plus plugin <= 1.3 version

Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Schema – All In One Schema Rich Snippets plugin <= 1

Cross-Site Request Forgery (CSRF) vulnerability in BoLiQuan WP Clean Up plugin <= 1.2.3 versions.

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a S

Cross-Site Request Forgery (CSRF) vulnerability in Anton Skorobogatov Rus-To-Lat plugin <= 0.3 versions.

Cross-Site Request Forgery (CSRF) vulnerability in utahta WP Social Bookmarking Light plugin <= 2.0.7 versions.

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. If Synapse and a malici

Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. The Matrix Federation A

Cross-Site Request Forgery (CSRF) vulnerability in 984.Ru For the visually impaired plugin <= 0.58 versions.

Cross-Site Request Forgery (CSRF) vulnerability in yonifre Maspik – Spam Blacklist plugin <= 0.7.8 versions.

Cross-Site Request Forgery (CSRF) vulnerability in conlabzgmbh WP Google Tag Manager plugin <= 1.1 versions.