2023

A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This v

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings

Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions.

Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions.

Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.

The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ par

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affe

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0.

A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critic

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This a

A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this i

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmre

A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the

A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vu

A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability

A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects th

A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is

A vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affe

A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unkn

A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critica

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System

A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This is

A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute ar

russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffi

Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in ve

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted

Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Wi

Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applicati

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in A

The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows l

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fau

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows

Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Blu

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of un

Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to p

Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to acce

Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, ref

Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Beca

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-s

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior t

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server tha

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the C