2023

A vulnerability, which was classified as critical, was found in Campcodes Coffee Shop POS System 1.0. Affected is an unk

A vulnerability, which was classified as critical, has been found in Campcodes Retro Basketball Shoes Online Store 1.0.

A vulnerability classified as critical was found in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerabilit

A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected

A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been declared as critical. Affect

Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sono

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sono

An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->blo

A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If s

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload craft

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the over

An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via

Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-S

@fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enfor

Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are

Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it t

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attac

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of serv

Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4.

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing inten

An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indica

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a d

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote att

The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature o

Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker posse

User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrol

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical. Affected

Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18.

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may no

A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Ke

A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to

Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are report

When instructing cloud-init to set a random password for a new user account, versions before 21.2 would write that passw

A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-componen

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with

A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VP

In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a miss

In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to lo

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead t

In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's c

In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This c

In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. Th

In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead

In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. T

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the