2023

Nextcloud richdocuments is a Nextcloud app integrating the office suit Collabora Online. In affected versions the secure

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time comp

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time comp

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a file with mod

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baske

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Af

A vulnerability was found in jeecg-boot 3.5.0 and classified as critical. This issue affects some unknown processing of

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. Attackers might be able to see

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. When a user with checkuserlog permissio

An issue was discovered in the GrowthExperiments extension for MediaWiki through 1.39.3. The UserImpactHandler for Growt

Improper Input Validation vulnerability in ABB AC500 V2 PM5xx allows Client-Server Protocol Manipulation.This issue affe

Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, an

Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost

When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_delete

When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of

A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affe

A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YKM YKM CRM allows

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardw

A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles inval

A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invali

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unkn

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unkno

A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component

A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functiona

A vulnerability was found in jeecg-boot 3.5.0. It has been declared as problematic. Affected by this vulnerability is an

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affecte

A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. Th

A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. Thi

Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerabi

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH co

A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in w

ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Manageme

A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System

A vulnerability classified as critical was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. Affected by

Nextcloud iOS is an ios application used to interface with the nextcloud home cloud ecosystem. In versions prior to 4.7.

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. In versions from 3.7.0 and

Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an ineffici

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares wi

A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project Op