2023

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function un

A vulnerability was found in SourceCodester Simple Image Stack Website 1.0. It has been rated as problematic. This issue

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive in

An issue has been discovered in GitLab EE affecting all versions starting from 8.17 before 16.4.4, all versions starting

Adobe Experience Manager versions 6.5.18 and earlier are affected by an Improper Input Validation vulnerability. A low-p

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. T

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only

Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker c

An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 an

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa

Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python

h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit

Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9,

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1,

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0,

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices do

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does

Mattermost fails to perform correct authorization checks when creating a playbook action, allowing users without access

Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions

SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack f

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path informa

This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2. Secure text fields ma

In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document typ

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logic

A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipu

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This iss

A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some un

A vulnerability classified as problematic was found in Typecho 1.2.1. Affected by this vulnerability is an unknown funct

A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /

A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the fi

PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe

An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct ini

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security v

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensit

Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive informati

fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certa

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications

A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vul

A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This i

A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects a

A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown proc

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown pro

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unkno

A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. A

A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0

Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is tran

The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-cod

An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting

An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting