2023

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML

Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548,

Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML

A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could resul

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined

A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclos

Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web ba

A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMe

Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link cl

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability all

A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the l

A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the fu

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this i

GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-th

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affecte

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affec

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue aff

A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vuln

A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This a

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. A

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part

A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password u

The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reT

A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to exec

A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the u

An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface

Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbit

Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback paramete

An issue was discovered in ebankIT before 7. Document Object Model based XSS exists within the /Security/Transactions/Tr

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may

Microsoft Edge (Chromium-based) Spoofing Vulnerability

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject maliciou

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempt

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of serv

A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown

Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard dis

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow los

EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS).

wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings.

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vul

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an

Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets.

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.