2023

The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2

The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to

The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary site

An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown edito

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the oper

Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on

An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read fun

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM

IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds chec

IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bound

A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remo

An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue

OpenZeppelin Contracts is a library for smart contract development. A merge issue when porting the 5.0.1 patch to the 4.

Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could dead

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensi

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensi

Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensi

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensit

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and d

A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in th

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been rated as critical. Affecte

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as problematic. A

A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been classified as critical. Af

A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B20230112. It has been rated as critical. This issue affects t

In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead

there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System

In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could le

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to loca

In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead

In private_handle_t of mali_gralloc_buffer.h, there is a possible information leak due to a logic error in the code. Th

In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due

In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bo

there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. Thi

there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to

In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check.

In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a miss

In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unk

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknow

A Qualys web application was found to have a stored XSS vulnerability resulting from the absence of HTML encoding in th

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management depar

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management departmen

Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management depart

An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a craft