2023

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently

A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown fu

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView suppor

An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials

A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemF

AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_auth

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is logging of user credentials. All authenticat

An issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists under the /api/v1/vdes

An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object Reference can occur under

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/v

A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affect

A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affect

A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion

A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulner

A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unk

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affe

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulner

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name par

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnera

A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affec

A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this is

A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown pa

A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this iss

A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown funct

A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /

A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability a

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an un

A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is s

A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulne

Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipbo

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the pa

Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occu

The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user,

protobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.

In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes

In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a speci

All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks

All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key.

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.

Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions.

Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions.

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320

Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than

Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted addr

Memory corruption due to use after free in Modem while modem initialization.

Information disclosure due to buffer overread in Linux sensors