2023

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file

A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unkno

A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnera

A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an u

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affe

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnera

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode

An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute ar

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affec

hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a maliciou

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application, caused

IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc

IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information

IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restricti

IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM

IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly

matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected vers

IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection

IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker cou

Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/s

Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection

Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 a

Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properl

IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local esca

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously craf

Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows atta

In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target fu

Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Busines

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing

Processing an incomplete post-handshake message for a QUIC connection can cause a panic.

The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script"

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <sc

FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerabi

SolarView Compact < 6.00 is vulnerable to Directory Traversal.

Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (bui

Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the inter

An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with g

Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to

Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthent

Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulner

Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page vi

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilit

icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF).

An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the e

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitiv