2023

Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary co

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to a

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to b

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to b

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.

A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This

A vulnerability, which was classified as critical, has been found in H3C R160 V1004004. Affected by this issue is some u

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected

Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from eleva

Mattermost Sever fails to redact the DB username and password before emitting an application log during server initializ

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been declared as critical. Thi

A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as critical. T

Attacker can access arbitrary recording/room Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeet

A vulnerability was found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected b

IBM API Connect V10 could allow an authenticated user to perform actions that they should not have access to. IBM X-For

IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed

Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could le

Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could le

A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to acc

An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user

A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat. This can be e

A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allow

A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking

An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid param

kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.

Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16

IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a downl

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when proces

The MoveIt framework 1.1.11 for ROS allows cross-site scripting (XSS) via the API authentication function. NOTE: this is

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scrip

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potenti

Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code v

The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/custome

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This v

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Thi

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 vers

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0

A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is a

Unintentional change of settings during initial registration of system administrators which uses control protocols. The