2023

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Paytm Paytm Payment Donation plugin <= 2.2.0 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions.

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Essitco AFFILIATE Solution plugin <= 1.0 versions.

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Cou

Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions.

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)

Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a den

An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to

A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitr

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.

Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.4.3.

The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. T

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all

An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the user

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactio

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when proce

libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.

libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c.

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection ob

Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an i

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactio

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in th

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `us

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By man

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is

An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zol

Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Str

Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation o

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause san

Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability ma

Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnera

Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may c

Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerabilit

Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation o

Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may c

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnera

Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnera

Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of th

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability m