2023

Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name.

The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing u

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been rated as critical. This issue aff

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulner

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been classified as critical. This affe

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by this i

A vulnerability has been found in SourceCodester Faculty Evaluation System 1.0 and classified as critical. Affected by t

A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affecte

A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. This

In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through 6

IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through 6

IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credent

Infopop Ultimate Bulletin Board up to v5.47a was discovered to allow all messages posted inside private forums to be dis

swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/

Docker Desktop for Windows before 4.6 allows attackers to overwrite any file through the windowscontainers/start dockerB

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 could disclose sensitive information in an error message. This informat

Plaintext Password in Registry vulnerability in 42gears surelock windows surelockwinsetupv2.40.0.Exe on Windows (Regi

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-pro

Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been rated as critical. This

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. Th

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical.

A vulnerability was found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affe

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds beca

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the serv

An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some sp

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit

Reflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated pr

Sensitive data could be exposed in logs of cloud-init before version 23.1.2. An attacker could use this information to f