2023

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialize

Cross-site Scripting (XSS) - Stored in GitHub repository phpipam/phpipam prior to v1.5.2.

A vulnerability classified as critical was found in hgzojer Vocable Trainer up to 1.3.0 on Android. This vulnerability a

A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to m

A flaw was found in Ceph, relating to the URL processing on RGW backends. An attacker can exploit the URL processing by

A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resour

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t

In Moodle, in some circumstances, email notifications of messages could have the link back to the original message hidde

In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks bei

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability

QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the QvsViewClient functi

Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary co

In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk.

In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions.

In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk

In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS ris

In Moodle, insufficient capability checks meant message deletions were not limited to the current user.

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerabil

PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /ad

ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via pac

ManageEngine ServiceDesk Plus through 14104, ServiceDesk Plus MSP through 14000, Support Center Plus through 14000, and

Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. I

FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `

Cross-site Scripting (XSS) - Stored in GitHub repository uvdesk/community-skeleton prior to 1.1.0.

The Scriptless Social Sharing WordPress plugin before 3.2.2 does not validate and escape some of its block options befor

The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only

The Advanced Recent Posts WordPress plugin through 0.6.14 does not validate and escape some of its shortcode attributes

The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before ou

The Resume Builder WordPress plugin through 3.1.1 does not sanitize and escape some parameters related to Resume, which

The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes befor

The WPaudio MP3 Player WordPress plugin through 4.0.2 does not validate and escape some of its shortcode attributes befo

The Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin through 1.1.1 does not validate and escape some of it

The i2 Pros & Cons WordPress plugin through 1.3.1 does not validate and escape some of its shortcode attributes before o

The eVision Responsive Column Layout Shortcodes WordPress plugin through 2.3 does not validate and escape some of its sh

The WordPress Shortcodes WordPress plugin through 1.6.36 does not validate and escape some of its shortcode attributes b

The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saysis Computer St

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. Thi

Download key for a file in a vault was passed in an insecure way that could easily be logged in M-Files New Web in M-Fil

A vulnerability classified as critical has been found in Zerocoin libzerocoin. Affected is the function CoinSpend::CoinS

A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/Temp

A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue i

A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of t

A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is so

An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files