2023

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue wa

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the resto

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quara

Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary op

Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform.

aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` stru

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting

Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This

PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.

Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arb

PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.

A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows at

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authen

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensi

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteMan

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in v

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in v

The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in ver

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of servi

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible t

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has vi

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wron

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expres

Discourse is an open source platform for community discussion. In affected versions a user logged as an administrator ca

Discourse is an open source platform for community discussion. Due to the improper sanitization of SVG files, an attacke

Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default inst

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` comman

A CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker to maintain unauthorized

Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotate

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vuln

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability

A CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause the user t

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supp

Vulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences Applications (component: Form