2023

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path t

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform path t

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform comman

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to perform comman

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an au

A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (A

An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link

LavaLite v9.0.0 is vulnerable to Cross Site Scripting (XSS).

In affected versions of Octopus Deploy it is possible to discover network details via error message

A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux K

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw all

A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerabilit

A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical.

A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solution (EUCS) v.1.0 allows a remote attacke

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affe

A vulnerability, which was classified as critical, was found in SourceCodester Budget and Expense Tracker System 1.0. Af

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue a

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects un

A vulnerability classified as critical has been found in SourceCodester Service Provider Management System 1.0. This aff

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. Previous versions of React

A vulnerability was found in Weaver OA 9.5 and classified as problematic. This issue affects some unknown processing of

A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions <2.1.0p28 and <2.2.0b8 allows remote authenticated

yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/modules

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nas

ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's securit

Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users dat

WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source

Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (

Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (

Algoo Tracim before 4.4.2 allows XSS via HTML file upload.

The MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map wi

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and in

Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended.

A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web

Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3

Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privilege

Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on th