2023

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

A vulnerability, which was classified as problematic, has been found in kalcaddle KodExplorer up to 4.49. Affected by th

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEn

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-b

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-b

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-b

NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authoriza

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bound

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference

@fastify/passport is a port of passport authentication library for the Fastify ecosystem. The CSRF (Cross-Site Request F

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a

An issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used thro

A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attac

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm.

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateWanParams interface at /gof

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter at /goform/aspForm.

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /gofo

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetAPWifiorLedInfoById interface

H3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm.

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList interface at /goform/a

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateMacClone interface at /gofo

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /gofo

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /g

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /gofo

H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/a

The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which di

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component.

Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI.

Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could

A vulnerability has been found in SourceCodester Task Reminder System 1.0 and classified as critical. This vulnerability

A vulnerability, which was classified as critical, was found in SourceCodester Task Reminder System 1.0. This affects an

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown fu

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been rated as critical. This issue affects som

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been declared as critical. This vulnerability

A vulnerability was found in Campcodes Coffee Shop POS System 1.0. It has been classified as critical. This affects an u

A vulnerability was found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this issue is

A vulnerability has been found in Campcodes Coffee Shop POS System 1.0 and classified as critical. Affected by this vuln