2023

The Dropbox Folder Share plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and includ

Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary w

The Horizontal scrolling announcement plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-

The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and incl

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive

A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to e

A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate pr

Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted scr

An issue was discovered in Qubo Smart Plug10A version HSP02_01_01_14_SYSTEM-10 A, allows local attackers to gain sensiti

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting i

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A S

Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable

SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalizati

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execu

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file r

A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces

A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is s

A flaw was found in OpenStack. Multiple components show plain-text passwords in /var/log/messages during the OpenStack o

Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 co

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 o

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 o

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 o

Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accep

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to

Discourse is an open-source discussion platform. Prior to version 3.1.1 of the `stable` branch and version 3.2.0.beta1 o

Strapi is the an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the l

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received,

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various

Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are no

Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a ver

Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get acce

An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ued

Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.

A vulnerability was found in NextBX QWAlerter 4.50. It has been rated as critical. Affected by this issue is some unknow

A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of

An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.1

A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue

A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerabili

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown fun

A vulnerability was found in didi KnowSearch 0.3.2/0.3.1.2. It has been rated as problematic. This issue affects some un

A vulnerability was found in app1pro Shopicial up to 20230830. It has been declared as problematic. This vulnerability a

Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF).

The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316

A flaw was found in Quay. Cross-site request forgery (CSRF) attacks force a user to perform unwanted actions in an appli