2023

Remote Procedure Call Runtime Information Disclosure Vulnerability

A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affect

A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Aff

A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0

A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability a

Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to c

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prio

Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to cause a denial of service

A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7

A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versio

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 t

A permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below, version 7.0.9 and belo

An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versio

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability [CWE-89] in Fortine

Hitachi Vantara Pentaho Business Analytics Server versions before 9.3.0.0, 9.2.0.4 and 8.3.0.27 does not correctly perf

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.3.0.0, 9.2.0.4 and 8.3.0.27 allow a malicious URL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo

A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts o

A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts o

A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via u

Snippet-box 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote attackers can render arbitrary web script or HTML

ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI

An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In media service, there is a missing permission check. This could lead to local denial of service in media service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.

A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions

A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Enti

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forg

A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Stora

Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8.

Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8.

TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH h

Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote una

National land numerical information data conversion tool all versions improperly restricts XML external entity reference

Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web managemen

Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass

Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated at

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 8

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Progr

SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756,