2023

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/m

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixe

An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1

An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting f

An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting f

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yotuwp Video Gallery plugin <= 1.3.12 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Image Social Feed plugin <= 1.7.6 versions

An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting fr

An issue has been discovered in GitLab affecting all versions starting from 4.1 before 16.1.5, all versions starting fro

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 16.1.5, all versions starting fr

An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions startin

ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser.

External Control of System or Configuration Setting in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.

An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON str

Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories F

Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin p

NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS).

Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.

Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2.

Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O

Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine wh

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

Sensitive information leak through log files. The following products are affected: Acronis Agent (Linux, macOS, Windows)

Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access c

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acron

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux

Sensitive information disclosure due to excessive collection of system information. The following products are affected:

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of Fr

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue aff

Local privilege escalation during installation due to improper soft link handling. The following products are affected: