2023

The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset pass

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insuf

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged use

libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at

A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Cons

A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows a

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malici

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the fu

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the ta

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Penta

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a

Silverstripe Form Capture provides a method to capture simple silverstripe forms and an admin interface for users. Start

Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspect

Wagtail is an open source content management system built on Django. Prior to versions 4.1.4 and 4.2.2, a memory exhaust

Wagtail is an open source content management system built on Django. Starting in version 1.5 and prior to versions 4.1.4

A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote use

An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back

The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which c

The Image Over Image For WPBakery Page Builder WordPress plugin before 3.0 does not validate and escape some of its shor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akbim Computer Pan

Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0. This can lead

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DupeOff.Com DupeOff plugin <= 1.6 versions.

Jenkins remote-jobs-view-plugin Plugin 0.0.3 and earlier does not configure its XML parser to prevent XML external entit

Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the "Generic JS Portlet" feature that lets a user populate a p

Jenkins Cppcheck Plugin 1.26 and earlier does not escape file names from Cppcheck report files before showing them on th

A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect

A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overal

Jenkins OctoPerf Load Testing Plugin Plugin 4.5.1 and earlier does not perform a permission check in a connection test H

A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.0 and earlier allow

Jenkins Pipeline Aggregator View Plugin 1.13 and earlier does not escape a variable representing the current view's URL

Jenkins JaCoCo Plugin 3.3.2 and earlier does not escape class and method names shown on the UI, resulting in a stored cr

IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb

Permission bypass when importing or synchronizing entries in User vault in Devolutions Server 2022.3.13 and prior ver

Information disclosure in the user creation feature of a MSSQL data source in Devolutions Remote Desktop Manager 2023.1.

Permission bypass when importing or synchronizing entries in User vault in Devolutions Remote Desktop Manager 2023.1.9

HCL Launch is vulnerable to HTML injection.  HTML code is stored and included without being sanitized. This can lead to

A vulnerability classified as critical was found in OTCMS 6.0.1. Affected by this vulnerability is an unknown functional

A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critica

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by

A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected

A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Aff

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where improper restriction of ope

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer handler, where improper privileg

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unpr

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write ca

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasti

Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to down