2023

All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. Duri

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the L

The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL qu

The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privil

In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of s

Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic

The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to per

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthen

CRMEB 4.4.4 is vulnerable to Any File download.

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API com

All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to impr

All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to imp

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for Po

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks durin

Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.

CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new contain

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana c

In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the admini

SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal P

A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects s

An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthen

In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.

NVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url will be sent to the serve

All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) typ

Buffer overflow vulnerability in function json_parse_string in sheredom json.h before commit 0825301a07cbf51653882bf2b15

Buffer overflow vulnerability in function json_parse_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc

Buffer overflow vulnerability in function json_parse_number in sheredom json.h before commit 0825301a07cbf51653882bf2b15

Buffer overflow vulnerability in function json_parse_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153

Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. The upl

Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server use

EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorke

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on th

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of servic

SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remot

Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the a

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and vi

An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and vi

An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege an

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path

Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path in

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt pa

Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command.

Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via fl

Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token ve

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie informa